Forum FAQ: Terminal Server License Server/Remote Desktop License Server Only Issuing Temporary Licenses and Event ID 17 Logged.

-

symptom

 

your terminal server license server or remote desktop license server issues temporary client access licenses (cals). in system log see event id 17 logged when terminal services licensing/remote desktop licensing service restarted, or when computer restarted. event continues logged after attempt reactivate license server.

 

event type: warning
event source: termservlicensing
event category: none
event id: 17
date: 3/17/2010
time: 3:14:13 am
user: n/a
computer: ls01
description:
1 or more terminal server licensing certificates on server ls01 corrupt. terminal server licensing issue temporary licenses until server reactivated. see terminal server licensing topic more information.

 

after start receiving event id 17, interaction microsoft clearinghouse except reactivation result in error below , license server deactivated. deactivation occur on license servers connected internet have connection method set automatic. 

 

windows server 2008 r2 activate server wizard error

 

the rd license manager encountered internal error license server. message number: 0xc0110011

 

windows server 2008 , windows server 2003 activate server wizard error

 

the license server activation wizard encountered internal error license server
message number: 0xc0110011

once license server becomes deactivated, event id 38 logged:

event type: error
event source: termservlicensing
event category: none
event id: 38
date: 3/17/2010
time: 3:15:32 am
user: n/a
computer:
description:
can't generate license client because of error 'can't add certificate store, error c0010020.'

this issue affects windows server 2008 r2, windows server 2008, , windows server 2003 license servers activated using automatic connection method.

 

cause

 

the certificate that issued microsoft clearinghouse licensing server expired on february 26, 2010. certificate expiration incorrectly interpreted corrupted certificate and the event 17 logged.

 

when license server activated, microsoft provides license server limited-use digital certificate validates server ownership , identity. microsoft uses x.509 industry standard certificate purpose. using certificate, license server can make subsequent transactions microsoft.

 

this certificate written following registry locations:

  • hkey_local_machine\software\microsoft\termservlicensing\certificates
  • hkey_local_machine\system\currentcontrolset\services\termservlicensing\parameters\certificates.000
  • hkey_local_machine\system\currentcontrolset\services\termservlicensing\parameters\certificates.001 

 

attempting activate license server fails using telephone or web connection method as the web , telephone methods wrongly assume registry key not present, certificates generated if activation done automatic connection method.

 

resolution

 

use 1 of following methods resolve issue. not necessary reinstall terminal server licensing or remote desktop licensing role resolve issue.

 

method 1 - license server connected internet

reactivate server ensuring connection method automatic. reactivating using automatic connection method resolve issue removes of certificate keys.

 

method 2 - license server not connected internet

  1. stop terminal services licensing\remote desktop licensing service either services snap-in or command line using net stop termservlicensing.
  2. delete of following registry keys:

    hkey_local_machine\software\microsoft\termservlicensing\certificates
    hkey_local_machine\system\currentcontrolset\services\termservlicensing\parameters\certificates.000
    hkey_local_machine\system\currentcontrolset\services\termservlicensing\parameters\certificates.001
  3. start terminal services licensing\remote desktop licensing service services snap-in or command line using net start termservlicensing.

 

 

more information

 

windows server division has published blog describe issue. more information, please refer following blog:

http://blogs.msdn.com/b/rds/archive/2010/03/30/event-17-certificate-corruption-on-terminal-services-remote-desktop-license-servers.aspx

 

applies to

  • windows 2000 server
  • windows server 2003
  • windows server 2003 r2
  • windows server 2008
  • windows server 2008 r2



Windows Server  >  Remote Desktop Services (Terminal Services)



Comments

Post a Comment

Popular posts from this blog

WIMMount (HSM) causing cluster storage to go redirected (2012r2 DC)

-
looking options resolve error , prevent in future. thanks help. hardware: 2 node dell hv cluster running2012r2 dc 8 nic/ea in multiplex mode 4x hyper-v 4x hosts storage: 2x synology nas, accessed through iscsi hosts , cluster relevant logs: log name:      microsoft-windows-failoverclustering/diagnostic source:        microsoft-windows-failoverclustering date:          event id:      2050 task category: none level:         warning keywords:       user:          system computer:      l description: [dcm] filter wimmount found @ unsafe altitude 180700 log name:      system source:        microsoft-windows-failoverclustering date:         event id:      5125 task category: cluster shared volume level:         warning keywords:       user:          system computer: description: cluster shared volume 'volume1' ('cluster disk 1') has identified 1 or more active filter drivers on device stack interfere csv operatio
Read more

Failed to delete the test record dcdiag-test-record in zone test.com

-
ps c:\users\administrator.test> dcdiag /test:dns directory server diagnosis performing initial setup:    trying find home server...    home server = dc02    * identified ad forest.    done gathering initial info. doing initial required tests    testing server: default-first-site-name\dc02       starting test: connectivity          ......................... dc02 passed test connectivity doing primary tests    testing server: default-first-site-name\dc02       starting test: dns          dns tests running , not hung. please wait few minutes...          ......................... dc02 passed test dns    running partition tests on : forestdnszones    running partition tests on : domaindnszones    running partition tests on : schema    running partition tests on : configuration    running partition tests on : test    running enterprise tests on : test.com       starting test: dns          test results domain
Read more

Azure MFA with Azure AD and RDS

-
i have setup following lab in azure , need help. a server (domain controller) , remote desktop services. and server multi factor authentication server. i have setup following one http://www.rdsgurus.com/uncategorized/step-by-step-using-windows-server-2012-r2-rd-gateway-with-azure-multifactor-authentication/ and when im connecting got following error. the user "domain\username", on client computer "xxx.xxx.xxx.xxx", did not meet connection authorization policy requirements , therefore not authorized access rd gateway server. authentication method used was: "ntlm" , connection protocol used: "rpc-http". following error occurred: "23003". also on security log i've got following authentication details: connection request policy name: ts gateway authorization policy network policy name: - authentication provider: radius proxy authentication server: test.test.local authentication type: - eap t
Read more