DetailPage-MSS-KB

Microsoft small business knowledge base

Article ID: 967887 - Last Review: February 12, 2009 - Revision: 1.0

Source: Microsoft Support

RAPID PUBLISHING

RAPID PUBLISHING ARTICLES PROVIDE INFORMATION DIRECTLY FROM WITHIN THE MICROSOFT SUPPORT ORGANIZATION. THE INFORMATION CONTAINED HEREIN IS CREATED IN RESPONSE TO EMERGING OR UNIQUE TOPICS, OR IS INTENDED SUPPLEMENT OTHER KNOWLEDGE BASE INFORMATION.

Symptom



When you use Terminal Server client to connect to a Windows Server 2003 that meets both of the following conditions:

·         Windows Server 2003 Terminal Licensing Server with Per Device Client Access License.

·         Windows Server 2003 Terminal Server running as Per Device.

 

it generates a Event id 1004:

 

Event ID: 1004

Computer: Computer Name

Description: The terminal server cannot issue a client license. It was unable to issue the license due to a changed (mismatched) client license, insufficient memory, or an internal error.

 

The Terminal Server will discover the Terminal Licensing Server but still the Terminal Licensing  Server won't issue the Client Access License to the client.

 

Additionally, even if you delete the X509 Certificate under

 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService\Parameters 

Note You would also see the Licensing Server name in this key.

 

and discover the Licensing Server this key would be generated back indicating that the Terminal Server is able to discover the Licensing Server but still will not issue the key.

Cause



This happens for the following reasons:

·         The Everyone Group is missing from the “Access this computer from the network” User Rights Assignments.

·         The Terminal Server cannot download the CAL for the client.

Resolution



To resolve this issue, in the User Rights Assignments at the Domain Controller level or at local policy on the Terminal Licensing Server, add the Everyone Group to the “Access this computer from the network”, and then reboot.

More Information



To diagnose this issue:

Run LSDiag on the Terminal Server and the Licensing Server you will see that the Everyone Group is missing from the "Access this computer from the network” User Rights Assignments.

 

If a simultaneous netmon traces is taken between the Terminal Server and Terminal Licensing Server while connecting to the Terminal Server, you would find;

 

Source            Destination          SMB      Session Setup AndX Response, Error: STATUS_LOGON_TYPE_NOT_GRANTED

NT Status: STATUS_LOGON_TYPE_NOT_GRANTED (0xc000015b)

 Since the Terminal Server does not have this right it is not able to download the CAL for the client.

For more information, see the following articles in the Microsoft Knowledgebase:

 

Client, service, and program incompatibilities that may occur when you modify security settings and user rights assignments

http://support.microsoft.com/default.aspx?scid=kb;EN-US;823659 (http://support.microsoft.com/default.aspx?scid=kb;en-us;823659)

 

How to override the license server discovery process in Windows Server 2003 Terminal Services

http://support.microsoft.com/?id=279561 (http://support.microsoft.com/?id=279561)

DISCLAIMER

MICROSOFT AND/OR ITS SUPPLIERS MAKE NO REPRESENTATIONS OR WARRANTIES ABOUT THE SUITABILITY, RELIABILITY OR ACCURACY OF THE INFORMATION CONTAINED IN THE DOCUMENTS AND RELATED GRAPHICS PUBLISHED ON THIS WEBSITE (THE “MATERIALS”) FOR ANY PURPOSE. THE MATERIALS MAY INCLUDE TECHNICAL INACCURACIES OR TYPOGRAPHICAL ERRORS AND MAY BE REVISED AT ANY TIME WITHOUT NOTICE.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, MICROSOFT AND/OR ITS SUPPLIERS DISCLAIM AND EXCLUDE ALL REPRESENTATIONS, WARRANTIES, AND CONDITIONS WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING BUT NOT LIMITED TO REPRESENTATIONS, WARRANTIES, OR CONDITIONS OF TITLE, NON INFRINGEMENT, SATISFACTORY CONDITION OR QUALITY, MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, WITH RESPECT TO THE MATERIALS.

APPLIES TO
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  • Microsoft Windows Server 2003, Web Edition
Keywords: 
kbnomt kbrapidpub KB967887
Share
Additional support options
Ask The Microsoft Small Business Support Community
Contact Microsoft Small Business Support
Find Microsoft Small Business Support Certified Partner
Find a Microsoft Store For In-Person Small Business Support