unable to login to sbs'03 domain with 2 unused CALs on server

Discussion in 'Windows Small Business Server' started by Vitaliy Konyk, Aug 31, 2007.

  1. hello.

    we've run into the situation when a user cannot login to sbs2003 domain
    while getting the error message saying that available licenses are over.
    looking at AD licensing snap-in we see that we have 15 CALs installed (which
    is true) with a maximum usage of 13 CALs.

    this issue occured in the short time after readding 10 CALs to the server -
    they were suddenly lost after a planned domain controller reboot.
    after several attempts the user finally got into domain.

    so we have three questions:
    1. where and why did the CALs go after reboot? (we've backed them up now)
    2. how exactly is the 'maximum CAL usage' number is being calculated by sbs?
    3. why couldn't the user log in for some time even after adding sufficient
    number of CALs to the server?

    CALs are all of one type, no problems with them had been noticed before
    those reboot.

    Thanks in advance!

    vk
     
    Vitaliy Konyk, Aug 31, 2007
    #1
    1. Advertisements

  2. Hello Customer,

    Thank you for posting here.

    From your post, I understand that after a reboot, the CALs were reset. Now
    the CALs are restored, however, a user cannot be added to the domain. It
    said there was not available CAL.

    In answer to your questions:

    For the problem why the CALs were reset, it can be caused by following
    factors:
    =================================================
    1. It can occur if an antivirus program deletes or quarantines the license
    store file. The license store file is named Licstr.cpa. This file is
    located in the %systemdrive%\Windows\System32 folder. Please Try to set
    exclusions for *.cpa, *.cpl and *.lls files not to be scanned.

    2. One of the dependent files get unregistered. Some 3rd party apps (such
    as XP-AntiSpy), can cause these libraries(Licdll.dll or Regwizc.dll) to be
    unregistered.

    3. A localization issue, this only happened on Turkish build, or any OS
    with Turkish setting, there is a QFE for this issue.

    4. When the computer is low on memory or low on free disk space, some of
    the licensing checks that are performed by the Windows Small Business
    Server license service will fail because the license check or the Active
    Directory service query to verify the credentials cannot be completed
    successfully. In this scenario, the Windows Small Business Server license
    service behaves as if it has been modified and resets the license store to
    the default of five CALs.

    Additional information for your reference:

    The number of client access licenses may be reset to five in Windows Small
    Business Server 2003
    http://support.microsoft.com/kb/888818

    Regarding Maximum Usage:
    =================
    In Server Management\Licensing, the maximum usage means the largest number
    of licenses have being in use since the server was built. That has no
    bearing (other than showing you if you are nearing your limit) on the
    number of currently installed licenses. The Maximum usage tracks the
    maximum number of users or devices are accessing the server simultaneously
    by polling the licensing service on the SBS server. Note that the Maximum
    usage number might not reflect the exact number of licenses in use at all
    times, because the licensing service is polled periodically rather than on
    an ongoing basis.

    Based on this point, for the third problem, it can be caused by that
    actually the CALs have been used out.

    Please let me know if the SBS server is the only server in your network. If
    there is any member server, please ensure the licensing mode and the
    licenses number on the member server is properly configured. I suggest that
    you refer to the following article to double check this:

    327644 How to configure licensing on an additional Windows server in an SBS
    http://support.microsoft.com/?id=327644

    To learn more information about licensing, I suggest you call
    1-800-426-9400 (select option 4), Monday through Friday, 6:00 A.M. to 6:00
    P.M. (PST) to speak directly to a Microsoft licensing specialist. He can
    help you to purchase, install and activate the CALs.

    Worldwide customers can use the Guide to Worldwide Microsoft Licensing
    Sites http://www.microsoft.com/licensing/index/worldwide.asp to find
    contact information in their locations.

    If it is not your scenario, please help me gather following information:

    1. What is your CALs mode? Per user or per device?
    2. How many users and devices are in your network?
    3. Please download the MPS Report tool from the following link and run it
    on both the client and the SBS server, then send the generated CAB file to
    my mailbox for further investigation so that we can
    find what the root cause is:

    http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
    15706/MPSRPT_NETWORK.EXE

    For your information:
    http://www.microsoft.com/downloads/details.aspx?FamilyId=CEBF3C7C-7CA5-408F-
    88B7-F9C79B7306C0&displaylang=en

    Please try the above steps at your earliest convenience. If you have any
    concern, please feel free to let me know.

    Best regards,

    Manfred Zhuang(MSFT)
    Microsoft Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
    --------------------
    | Thread-Topic: unable to login to sbs'03 domain with 2 unused CALs on
    server
    | thread-index: Acfr4mh7bVs4x+QvRYi5Ih7gyyHmuQ==
    | X-WBNR-Posting-Host: 207.46.192.207
    | From: =?Utf-8?B?Vml0YWxpeSBLb255aw==?=
    <>
    | Subject: unable to login to sbs'03 domain with 2 unused CALs on server
    | Date: Fri, 31 Aug 2007 08:20:05 -0700
    | Lines: 24
    | Message-ID: <>
    | MIME-Version: 1.0
    | Content-Type: text/plain;
    | charset="Utf-8"
    | Content-Transfer-Encoding: 7bit
    | X-Newsreader: Microsoft CDO for Windows 2000
    | Content-Class: urn:content-classes:message
    | Importance: normal
    | Priority: normal
    | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
    | Newsgroups: microsoft.public.windows.server.sbs
    | Path: TK2MSFTNGHUB02.phx.gbl
    | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:60048
    | NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
    | X-Tomcat-NG: microsoft.public.windows.server.sbs
    |
    | hello.
    |
    | we've run into the situation when a user cannot login to sbs2003 domain
    | while getting the error message saying that available licenses are over.
    | looking at AD licensing snap-in we see that we have 15 CALs installed
    (which
    | is true) with a maximum usage of 13 CALs.
    |
    | this issue occured in the short time after readding 10 CALs to the server
    -
    | they were suddenly lost after a planned domain controller reboot.
    | after several attempts the user finally got into domain.
    |
    | so we have three questions:
    | 1. where and why did the CALs go after reboot? (we've backed them up now)
    | 2. how exactly is the 'maximum CAL usage' number is being calculated by
    sbs?
    | 3. why couldn't the user log in for some time even after adding sufficient
    | number of CALs to the server?
    |
    | CALs are all of one type, no problems with them had been noticed before
    | those reboot.
    |
    | Thanks in advance!
    |
    | vk
    |
    |
     
    Manfred Zhuang [MSFT], Sep 3, 2007
    #2
    1. Advertisements

  3. Thanks for your reply! We will try to use your suggestions.

    vk
     
    Vitaliy Konyk, Sep 5, 2007
    #3
  4. Hello Customer,

    Thank you for your reply.

    If you need further assistance or if you need any additional information on
    this issue, feel free to let me know.

    Best regards,

    Manfred Zhuang(MSFT)
    Microsoft Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
    --------------------
    | Thread-Topic: unable to login to sbs'03 domain with 2 unused CALs on
    server
    | thread-index: Acfvz/WmTW3pL4YlQOmQdn3RT/3oWA==
    | X-WBNR-Posting-Host: 207.46.19.197
    | From: =?Utf-8?B?Vml0YWxpeSBLb255aw==?=
    <>
    | References: <>
    <>
    | Subject: RE: unable to login to sbs'03 domain with 2 unused CALs on server
    | Date: Wed, 5 Sep 2007 08:18:06 -0700
    | Lines: 3
    | Message-ID: <>
    | MIME-Version: 1.0
    | Content-Type: text/plain;
    | charset="Utf-8"
    | Content-Transfer-Encoding: 7bit
    | X-Newsreader: Microsoft CDO for Windows 2000
    | Content-Class: urn:content-classes:message
    | Importance: normal
    | Priority: normal
    | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
    | Newsgroups: microsoft.public.windows.server.sbs
    | Path: TK2MSFTNGHUB02.phx.gbl
    | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:60998
    | NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
    | X-Tomcat-NG: microsoft.public.windows.server.sbs
    |
    | Thanks for your reply! We will try to use your suggestions.
    |
    | vk
    |
     
    Manfred Zhuang [MSFT], Sep 6, 2007
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.