You receive a temporary TS CAL when the DN of a user account contains the forward slash-mark character in Windows Server 2008 if Per User licensing mode is used

Article ID: 2542272
Expand all | Collapse all

On This Page

Symptoms

Consider the following scenario:
  • You install some Terminal Services Per User client access licenses (TS Per User CALs) on a Terminal Services license server that is running Windows Server 2008.
  • You configure a terminal server that is running Windows Server 2008 to obtain TS CALs from the Terminal Services license server.
  • You configure the terminal server to use the Per User licensing mode.
  • You use a user account to create a terminal server session to the terminal server.
  • The distinguished name (DN) of the user account contains the forward slash-mark character (/).
In this scenario, the user account incorrectly receives a temporary TS CAL. Additionally, the following event is logged in the System log on the Terminal Services license server:

Log Name: System
Source: Microsoft-Windows-TerminalServices-Licensing
Date: <date & time>
Event ID: 4105
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: <computer name>

Description:
The Terminal Services license server cannot update the license attributes for user "name" in the Active Directory Domain "name". Ensure that the computer account for the license server is a member of Terminal Server License Servers group in Active Directory domain "name".

If the license server is installed on a domain controller, the Network Service account also needs to be a member of the Terminal Server License Servers group.

If the license server is installed on a domain controller, after you have added the appropriate accounts to the Terminal Server License Servers group, you must restart the Terminal Services Licensing service to track or report the usage of TS Per User CALs.

Win32 error code: 0x80005000

Back to the top | Give Feedback

Cause

This issue occurs because the Terminal Services Licensing service handles the forward slash-mark character (/) in distinguished names incorrectly.

When the service uses the DN of the user account to run Active Directory query operations, the operations fail. Therefore, the user account incorrectly receives a temporary TS CAL.
Back to the top | Give Feedback

Resolution

Hotfix information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft website:
http://support.microsoft.com/contactus/?ws=support
(http://support.microsoft.com/contactus/?ws=support)
Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

To apply this hotfix, you must be running Windows Server 2008 Service Pack 2 (SP2). Additionally, the Terminal Services role must be installed on the computer.

For more information about how to obtain a Windows Server 2008 service pack, click the following article number to view the article in the Microsoft Knowledge Base:
968849
(http://support.microsoft.com/kb/968849/ )
How to obtain the latest service pack for Windows Server 2008

Registry information

To use the hotfix in this package, you do not have to make any changes to the registry.

Restart requirement

You must restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace a previously released hotfix.

File information

The English version of this hotfix installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.
Windows Server 2008 file information notes
Important Windows Vista hotfixes and Windows Server 2008 hotfixes are included in the same packages. However, only "Windows Vista" is listed on the Hotfix Request page. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows Vista" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.
  • The files that apply to a specific product, SR_Level (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.
    Collapse this tableExpand this table
    VersionProductSR_LevelService branch
    6.0.600 2 . 22xxxWindows Server 2008SP2LDR
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows Server 2008" section. MUM files and MANIFEST files, and the associated security catalog (.cat) files, are extremely important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
For all supported x86-based versions of Windows Server 2008
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Lserver.dll6.0.6002.22677467,96812-Jul-201115:09x86
Tlsmigplugin.dll6.0.6002.2267775,77612-Jul-201115:11x86
Tlsunattend.exe6.0.6002.226778,70412-Jul-201113:32x86
Tslicensing.events.xmlNot applicable54915-Mar-201105:22Not applicable
For all supported x64-based versions of Windows Server 2008
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Lserver.dll6.0.6002.22677641,02412-Jul-201115:36x64
Tlsmigplugin.dll6.0.6002.22677102,91212-Jul-201115:37x64
Tlsunattend.exe6.0.6002.2267710,24012-Jul-201114:05x64
Tslicensing.events.xmlNot applicable54915-Mar-201104:36Not applicable

Back to the top | Give Feedback

Workaround

To work around this issue, rename the DN of the user account to remove the forward slash-mark character (/).
Back to the top | Give Feedback

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Back to the top | Give Feedback

More information

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684
(http://support.microsoft.com/kb/824684/ )
Description of the standard terminology that is used to describe Microsoft software updates

Additional file information

Additional file information for Windows Server 2008

Additional files for all supported x86-based versions of Windows Server 2008
Collapse this tableExpand this table
File namePackage_1_for_kb2542272~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot applicable
File size1,965
Date (UTC)12-Jul-2011
Time (UTC)18:18
File namePackage_for_kb2542272_server_1~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot applicable
File size1,374
Date (UTC)12-Jul-2011
Time (UTC)18:18
File namePackage_for_kb2542272_server~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot applicable
File size1,436
Date (UTC)12-Jul-2011
Time (UTC)18:18
File nameX86_89230d1df3537e7bed069166f4343497_31bf3856ad364e35_6.0.6002.22677_none_61e48fde4d8649b7.manifest
File versionNot applicable
File size718
Date (UTC)12-Jul-2011
Time (UTC)18:18
File nameX86_microsoft-windows-t..vices-licenseserver_31bf3856ad364e35_6.0.6002.22677_none_a3735142b4fe8fe5.manifest
File versionNot applicable
File size97,532
Date (UTC)12-Jul-2011
Time (UTC)15:34
Additional files for all supported x64-based versions of Windows Server 2008
Collapse this tableExpand this table
File nameAmd64_d98d816c0257182f44d9afbe7912125d_31bf3856ad364e35_6.0.6002.22677_none_f42fc5291c9ba353.manifest
File versionNot applicable
File size722
Date (UTC)12-Jul-2011
Time (UTC)18:18
File nameAmd64_microsoft-windows-t..vices-licenseserver_31bf3856ad364e35_6.0.6002.22677_none_ff91ecc66d5c011b.manifest
File versionNot applicable
File size97,586
Date (UTC)12-Jul-2011
Time (UTC)16:04
File namePackage_1_for_kb2542272~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot applicable
File size1,977
Date (UTC)12-Jul-2011
Time (UTC)18:18
File namePackage_for_kb2542272_server_1~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot applicable
File size1,382
Date (UTC)12-Jul-2011
Time (UTC)18:18
File namePackage_for_kb2542272_server~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot applicable
File size1,444
Date (UTC)12-Jul-2011
Time (UTC)18:18
Back to the top | Give Feedback

Properties

Article ID: 2542272 - Last Review: December 27, 2012 - Revision: 2.1
Keywords: 
kbautohotfix kbqfe kbhotfixserver kbfix kbsurveynew kbexpertiseinter KB2542272
Back to the top | Give Feedback

Give Feedback

 
Back to the topBack to the top