W2k TS & XP Rdp

[Kenact]

I have a windows 2000 Terminal Server in a WinNT4 domain. Licensing is
running on the TS.

I am establishing a VPN connection from my laptop (not a domain member) to
the network using a SonicWALL TZ-170 and the SW Global VPN client.

I can connect to another W2K server running in Remote Admin mode, but I
can't connect to the TS running in Application Mode. All I get in the Event
Log is a 1004 "The terminal server cannot issue a client license." event.

Once logged on to the server running Remote Admin mode, I can log on to the
Application Server.

Any clues?

Thx,
Ken

 

[Vera Noest [MVP]]

There might be a black hole router between your client and the TS,
which blocks packets above a certain size. This prevents the
transfer of the permanent TS CAL to the client (on first
connection, the client gets a temporary license, on second
connection, it gets a permanent license).

If this is the problem, you have to change the MTU size. Check the
Terminal Services FAQ, there are 2 items about this under
"Connectivity"

http://www.microsoft.com/windowsserver2003/community/centers/termin
al/terminal_faq.asp

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?S2VuYWN0?= <Kenact@discussions.microsoft.com> wrote on
03 aug 2007 in microsoft.public.windows.terminal_services:

> I have a windows 2000 Terminal Server in a WinNT4 domain.
> Licensing is running on the TS.
>
> I am establishing a VPN connection from my laptop (not a domain
> member) to the network using a SonicWALL TZ-170 and the SW
> Global VPN client.
>
> I can connect to another W2K server running in Remote Admin
> mode, but I can't connect to the TS running in Application Mode.
> All I get in the Event Log is a 1004 "The terminal server
> cannot issue a client license." event.
>
> Once logged on to the server running Remote Admin mode, I can
> log on to the Application Server.
>
> Any clues?
>
> Thx,
> Ken

 

[Kenact]

Thanks, but Been there Done that.

I can get to a Remote Admin TS but not the App Mode TS.

"Vera Noest [MVP]" wrote:

> There might be a black hole router between your client and the TS,
> which blocks packets above a certain size. This prevents the
> transfer of the permanent TS CAL to the client (on first
> connection, the client gets a temporary license, on second
> connection, it gets a permanent license).
>
> If this is the problem, you have to change the MTU size. Check the
> Terminal Services FAQ, there are 2 items about this under
> "Connectivity"
>
> http://www.microsoft.com/windowsserver2003/community/centers/termin
> al/terminal_faq.asp
>
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> =?Utf-8?B?S2VuYWN0?= <Kenact@discussions.microsoft.com> wrote on
> 03 aug 2007 in microsoft.public.windows.terminal_services:
>
> > I have a windows 2000 Terminal Server in a WinNT4 domain.
> > Licensing is running on the TS.
> >
> > I am establishing a VPN connection from my laptop (not a domain
> > member) to the network using a SonicWALL TZ-170 and the SW
> > Global VPN client.
> >
> > I can connect to another W2K server running in Remote Admin
> > mode, but I can't connect to the TS running in Application Mode.
> > All I get in the Event Log is a 1004 "The terminal server
> > cannot issue a client license." event.
> >
> > Once logged on to the server running Remote Admin mode, I can
> > log on to the Application Server.
> >
> > Any clues?
> >
> > Thx,
> > Ken
>

 

[Vera Noest [MVP]]

If there's anything else that you've already excluded, it would be
nice if you would mention that in your post.

What OS is your laptop running?
If it's not entitled to a free TS CAL from the TS Licensing Server
(the "Existing Windows 2000 TS CALs"), then you would need a
purchased TS CAL. This would apply to W2K Home, XP Home, unix,
Macintosh.
Do you have Administrative rights on your laptop? You need to be
able to write to the registry key which stores the license locally.
If you're running Vista, you need to start the rdp client with "Run
as Administrator".
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?S2VuYWN0?= <Kenact@discussions.microsoft.com> wrote on
04 aug 2007 in microsoft.public.windows.terminal_services:

> Thanks, but Been there Done that.
>
> I can get to a Remote Admin TS but not the App Mode TS.
>
> "Vera Noest [MVP]" wrote:
>
>> There might be a black hole router between your client and the
>> TS, which blocks packets above a certain size. This prevents
>> the transfer of the permanent TS CAL to the client (on first
>> connection, the client gets a temporary license, on second
>> connection, it gets a permanent license).
>>
>> If this is the problem, you have to change the MTU size. Check
>> the Terminal Services FAQ, there are 2 items about this under
>> "Connectivity"
>>
>> http://www.microsoft.com/windowsserver2003/community/centers/ter
>> min al/terminal_faq.asp
>>
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> ___ please respond in newsgroup, NOT by private email ___
>>
>> =?Utf-8?B?S2VuYWN0?= <Kenact@discussions.microsoft.com> wrote
>> on 03 aug 2007 in microsoft.public.windows.terminal_services:
>>
>> > I have a windows 2000 Terminal Server in a WinNT4 domain.
>> > Licensing is running on the TS.
>> >
>> > I am establishing a VPN connection from my laptop (not a
>> > domain member) to the network using a SonicWALL TZ-170 and
>> > the SW Global VPN client.
>> >
>> > I can connect to another W2K server running in Remote Admin
>> > mode, but I can't connect to the TS running in Application
>> > Mode.
>> > All I get in the Event Log is a 1004 "The terminal server
>> > cannot issue a client license." event.
>> >
>> > Once logged on to the server running Remote Admin mode, I can
>> > log on to the Application Server.
>> >
>> > Any clues?
>> >
>> > Thx,
>> > Ken

 

[Kenact]

There are two laptops having this problem. Mine, which is XP Pro, and yes, I
am a local admin on my laptop. With my laptop I can logon to the server if
I'm on the LAN, but not when I connect through the VPN. As I said, I can
connect to another W2K Server that's configured for Remote Admin mode.

The other is an XP Home laptop. I'm not aware of the "purchase TS Cal"
issue for XP Home. This same XP Home laptop will connect to an XP Pro
desktop using the same client. Why would that be different for a W2K server
which has permanent unlimited licenses?

Thanks,
Ken

"Vera Noest [MVP]" wrote:

> If there's anything else that you've already excluded, it would be
> nice if you would mention that in your post.
>
> What OS is your laptop running?
> If it's not entitled to a free TS CAL from the TS Licensing Server
> (the "Existing Windows 2000 TS CALs"), then you would need a
> purchased TS CAL. This would apply to W2K Home, XP Home, unix,
> Macintosh.
> Do you have Administrative rights on your laptop? You need to be
> able to write to the registry key which stores the license locally.
> If you're running Vista, you need to start the rdp client with "Run
> as Administrator".
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> =?Utf-8?B?S2VuYWN0?= <Kenact@discussions.microsoft.com> wrote on
> 04 aug 2007 in microsoft.public.windows.terminal_services:
>
> > Thanks, but Been there Done that.
> >
> > I can get to a Remote Admin TS but not the App Mode TS.
> >
> > "Vera Noest [MVP]" wrote:
> >
> >> There might be a black hole router between your client and the
> >> TS, which blocks packets above a certain size. This prevents
> >> the transfer of the permanent TS CAL to the client (on first
> >> connection, the client gets a temporary license, on second
> >> connection, it gets a permanent license).
> >>
> >> If this is the problem, you have to change the MTU size. Check
> >> the Terminal Services FAQ, there are 2 items about this under
> >> "Connectivity"
> >>
> >> http://www.microsoft.com/windowsserver2003/community/centers/ter
> >> min al/terminal_faq.asp
> >>
> >> _________________________________________________________
> >> Vera Noest
> >> MCSE, CCEA, Microsoft MVP - Terminal Server
> >> TS troubleshooting: http://ts.veranoest.net
> >> ___ please respond in newsgroup, NOT by private email ___
> >>
> >> =?Utf-8?B?S2VuYWN0?= <Kenact@discussions.microsoft.com> wrote
> >> on 03 aug 2007 in microsoft.public.windows.terminal_services:
> >>
> >> > I have a windows 2000 Terminal Server in a WinNT4 domain.
> >> > Licensing is running on the TS.
> >> >
> >> > I am establishing a VPN connection from my laptop (not a
> >> > domain member) to the network using a SonicWALL TZ-170 and
> >> > the SW Global VPN client.
> >> >
> >> > I can connect to another W2K server running in Remote Admin
> >> > mode, but I can't connect to the TS running in Application
> >> > Mode.
> >> > All I get in the Event Log is a 1004 "The terminal server
> >> > cannot issue a client license." event.
> >> >
> >> > Once logged on to the server running Remote Admin mode, I can
> >> > log on to the Application Server.
> >> >
> >> > Any clues?
> >> >
> >> > Thx,
> >> > Ken
>

 

[Vera Noest [MVP]]

XP Home clients need a purchased TS CAL when connecting to a W2K
Terminal Server. Documented here:

Microsofts Terminal Services FAQ
http://www.microsoft.com/technet/community/en-
us/terminal/terminal_faq.mspx

"For Windows 2000 Terminal Servers, the license server issues
machines running Windows 2000/Windows XP Professional a "free"
Terminal Services CAL from its built-in pool (and its use is
permitted under the Windows 2000 Server EULA). Windows XP
Professional is a successor to Windows 2000 Professional, and as a
result does not need a Terminal Services CAL to access a Windows
2000 Server running Terminal Services. However, Windows XP Home
Edition is not a successor to Windows 2000 Professional (rather, it
is a successor to Windows Millennium Edition) and therefore does
require a Terminal Services CAL in order to access Windows 2000
Terminal Services."

As for your laptop running Xp Pro: since you can connect to a
server in RA mode (you don't need a license for that connection),
and that you can connect to the TS when on the LAN, the problem
seems to lie in your VPN connection. If it's not the MTU size, I
have no idea what else can cause this.
You mentioned getting EWventID 1004 on the TS, but which error
message do you get on the client?

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?S2VuYWN0?= <Kenact@discussions.microsoft.com> wrote on
04 aug 2007 in microsoft.public.windows.terminal_services:

> There are two laptops having this problem. Mine, which is XP
> Pro, and yes, I am a local admin on my laptop. With my laptop I
> can logon to the server if I'm on the LAN, but not when I
> connect through the VPN. As I said, I can connect to another
> W2K Server that's configured for Remote Admin mode.
>
> The other is an XP Home laptop. I'm not aware of the "purchase
> TS Cal" issue for XP Home. This same XP Home laptop will
> connect to an XP Pro desktop using the same client. Why would
> that be different for a W2K server which has permanent unlimited
> licenses?
>
> Thanks,
> Ken
>
> "Vera Noest [MVP]" wrote:
>
>> If there's anything else that you've already excluded, it would
>> be nice if you would mention that in your post.
>>
>> What OS is your laptop running?
>> If it's not entitled to a free TS CAL from the TS Licensing
>> Server (the "Existing Windows 2000 TS CALs"), then you would
>> need a purchased TS CAL. This would apply to W2K Home, XP Home,
>> unix, Macintosh.
>> Do you have Administrative rights on your laptop? You need to
>> be able to write to the registry key which stores the license
>> locally. If you're running Vista, you need to start the rdp
>> client with "Run as Administrator".
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> ___ please respond in newsgroup, NOT by private email ___
>>
>> =?Utf-8?B?S2VuYWN0?= <Kenact@discussions.microsoft.com> wrote
>> on 04 aug 2007 in microsoft.public.windows.terminal_services:
>>
>> > Thanks, but Been there Done that.
>> >
>> > I can get to a Remote Admin TS but not the App Mode TS.
>> >
>> > "Vera Noest [MVP]" wrote:
>> >
>> >> There might be a black hole router between your client and
>> >> the TS, which blocks packets above a certain size. This
>> >> prevents the transfer of the permanent TS CAL to the client
>> >> (on first connection, the client gets a temporary license,
>> >> on second connection, it gets a permanent license).
>> >>
>> >> If this is the problem, you have to change the MTU size.
>> >> Check the Terminal Services FAQ, there are 2 items about
>> >> this under "Connectivity"
>> >>
>> >> http://www.microsoft.com/windowsserver2003/community/centers/
>> >> ter min al/terminal_faq.asp
>> >>
>> >> _________________________________________________________
>> >> Vera Noest
>> >> MCSE, CCEA, Microsoft MVP - Terminal Server
>> >> TS troubleshooting: http://ts.veranoest.net
>> >> ___ please respond in newsgroup, NOT by private email ___
>> >>
>> >> =?Utf-8?B?S2VuYWN0?= <Kenact@discussions.microsoft.com>
>> >> wrote on 03 aug 2007 in
>> >> microsoft.public.windows.terminal_services:
>> >>
>> >> > I have a windows 2000 Terminal Server in a WinNT4 domain.
>> >> > Licensing is running on the TS.
>> >> >
>> >> > I am establishing a VPN connection from my laptop (not a
>> >> > domain member) to the network using a SonicWALL TZ-170 and
>> >> > the SW Global VPN client.
>> >> >
>> >> > I can connect to another W2K server running in Remote
>> >> > Admin mode, but I can't connect to the TS running in
>> >> > Application Mode.
>> >> > All I get in the Event Log is a 1004 "The terminal server
>> >> > cannot issue a client license." event.
>> >> >
>> >> > Once logged on to the server running Remote Admin mode, I
>> >> > can log on to the Application Server.
>> >> >
>> >> > Any clues?
>> >> >
>> >> > Thx,
>> >> > Ken