Announcement

Collapse
No announcement yet.

Moving Terminal Services Licensing Server and Deprovisioning old domain controllers

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Moving Terminal Services Licensing Server and Deprovisioning old domain controllers

    Hello all - I am running into some issues here and I was wondering if anyone could point me in the right direction.

    Here is our environment "pre phase II:"

    2 domain controllers one of which is the terminal services licensing server.
    AD1 - TS Licensing server
    AD2

    10 terminal services servers, app1-app10, and various other member servers which don't matter right now.

    Phase II environment adds:

    2 additional domain controllers to replace the old 2 domain controllers called:
    AD1-N
    AD2-N

    So currently there is 4 domain controllers in the environment, AD1, AD2, AD1-N, AD2-N, plus the 10 terminal servers (and various other member services but the don't matter right now)

    My goal:

    To decommission the original domain controllers, AD1 and AD2.

    What I've Done so far:


    1) Made AD1-N a terminal services licensing server and updated the Group Policy object which defined what licensing server to use for Terminal Services
    licensing
    2) Transferred FSMO roles from AD1/AD2 to the two new AD boxes AD1-N/AD2-N
    3) Edited the Registry key found @ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\TermService\Parameters\LicenseServers from the old AD1 TS license server to the new AD1-N TS license server

    My problem:

    Before we dcpromo and demote the old AD1/AD2 domain controllers, we need to make sure everything is going to be square. So what I am doing is taking both old DCs off the network.

    What happens when I take the old DCs off (ad1/ad2) is that is takes about 15-30 seconds to login to the Terminal Servers APP1-APP10. The issue is not DNS - I've updated primary/secondary DNS on the Terminal Servers NICs to the new AD servers (AD1-N, AD2-N)

    When the old DCs are offline (ad1/ad2) I open Terminal Services Licensing manager it opens up and tries to connect to AD1 and AD2 and times out because they are offline before it successfully makes an instant connectionto the newly setup DC with that is a Terminal Services licensing server, AD1-N.



    Right now I am at a loss. Do you think if I properly demote the old AD1/AD2 original domain controllers from the domain all of the APP1-10 servers won't look for them for licensing anymore before it looks to the server that is set in the GPO?

    If anyone has any questions on this post or needs me to clear anything up please let me know. I realize it is long and drawn out.


    Thanks.

  • #2
    Re: Moving Terminal Services Licensing Server and Deprovisioning old domain controlle

    TS Server required activation and redeploy the licenses (and activate it) - so I guess that
    you may need to follow this step and not use export/backup registry...
    Best Regards,

    Yuval Sinay

    LinkedIn: https://www.linkedin.com/in/yuval14, Blog: http://blogs.microsoft.co.il/blogs/yuval14

    Comment


    • #3
      Re: Moving Terminal Services Licensing Server and Deprovisioning old domain controlle

      It is already active on both the new domain controller and old domain controller. We are a service provider with a SPLA license. So basically there are two TS licensing servers in the domain now, both activated. When we take the 2 old DCs offline all terminal services still attempt to look to the old AD servers for a TS license even though the GPO says to look to the new License server running on the new DC. I've also edited the registry keys on each terminal server to look to the new AD server for TS licensing.

      So basically we want to make sure everyone is going to be fine before we demote the old domain controllers, so we unplug the old DCs from the network to see the results. Result is all terminal servers take 10-15 seconds to login via RDP because they look to the old DCs for TS licesning before they finally time out and then the terminal server looks to the new domain controller for a TS license and finally obtains one and logs in.

      Any insight is appreciated. I'm thinking to resolve this problem we just need to demote the old domain controllers cleanly??

      Comment


      • #4
        Re: Moving Terminal Services Licensing Server and Deprovisioning old domain controlle

        Almost 100 views and no ideas?

        Comment


        • #5
          Re: Moving Terminal Services Licensing Server and Deprovisioning old domain controlle

          The "strange" is skiping MS advice.
          Please review TS License settings in the Active Directory and the local license registry in each TS server.
          Best Regards,

          Yuval Sinay

          LinkedIn: https://www.linkedin.com/in/yuval14, Blog: http://blogs.microsoft.co.il/blogs/yuval14

          Comment


          • #6
            Re: Moving Terminal Services Licensing Server and Deprovisioning old domain controlle

            When you say check the TS license settings in AD, what should I be checking?

            Currently there are 2 active license servers, both with valid licenses.

            The registry on the boxes points to the NEW license server, which will be replacing the old license server.

            Here is my issue, again:

            Before demoting the original domain controller which is also a TS license server, we unplug it from the network to see the results.

            The results are that all terminal servers look to this original TS license server before obtaining a license from the NEW license server. It takes some time to login to the terminal servers because it looks for the original TS license server, and times out, because it is offline. It does this even with the local registry edited to point to the NEW TS license server and GPO setting saying where to obtain the TS license from. (from the new TS license server)

            Do you know if this problem with the terminal servers looking to the original license server for a license even though local registry/GPO says to look to the new will not exist if we successfully demote it and remove it from the domain?

            Comment


            • #7
              Re: Moving Terminal Services Licensing Server and Deprovisioning old domain controlle

              http://blogs.msdn.com/ts/archive/200...e-servers.aspx

              http://support.microsoft.com/kb/301932
              Best Regards,

              Yuval Sinay

              LinkedIn: https://www.linkedin.com/in/yuval14, Blog: http://blogs.microsoft.co.il/blogs/yuval14

              Comment

              Working...
              X