locked
How to add a license server into the AD group "terminal server license servers" RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    We have some W2K12 terminal server running in Azure. As ADS we use the Azure AD.

    Now I want to add a license server into the AD group "terminal server license servers", but the "Add" button in greyed out:

    How I can reach my goal to add the license server inside this group?

    Many greetings,

    Thorsten


    Friday, October 13, 2017 9:54 AM

Answers

  • Question
    Sign in to vote
    2
    Sign in to vote

    Hi Thorsten,

    This is a known limitation of Azure Active Directory Domain Services (AAD DS).  The current workaround is to ignore errors and manually track license usage.  Tracking license assignment using manual or other method in addition to built-in RD Licensing Manager tracking is a good idea regardless.

    In the AAD DS session at Ignite 2017 they said a fix is coming soon.  Once the fix is rolled out a member of AAD DC Administrators will be able to add the account to the group.

    What’s new in Azure Active Directory Domain Services - BRK3295

    https://youtu.be/T1Nd9APNceQ?t=35m

    -TP

    • Proposed as answer by Amy Wang_ Tuesday, October 17, 2017 4:01 AM
    • Marked as answer by Bitshaker Tuesday, October 17, 2017 6:13 AM
    Tuesday, October 17, 2017 12:36 AM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Bitshaker,

    Add member to a group, membership in Account Operators, Domain Admins, or Enterprise Admins, or equivalent, is the minimum required to complete this procedure. Could you please verify membership of current user and permissions of Terminal Server License Servers group? 

    If you need further help, please feel free to let us know.

    Best Regards,

    William

    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, October 16, 2017 7:18 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi William,

    thank you for your reply. The problem is, that we are in Azure and not in a local domain. So I can't be a member of Domain or Enterprise Admins, because in Azure this is not possible. I'm "only" a member of the group "AAD DC Administrators".


    Many greetings,

    Thorsten

    Monday, October 16, 2017 7:36 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    Based on my research and test, we couldn’t modify group memberships using ADUC if we are using Azure AD.

    For more information, please refer to the following article:

    Azure Active Directory Domain Services: Frequently Asked Questions (FAQs)

    https://docs.microsoft.com/en-us/azure/active-directory-domain-services/active-directory-ds-faqs

    Can I modify group memberships using LDAP or other AD administrative tools on managed domains?

    No. Group memberships cannot be modified on domains serviced by Azure AD Domain Services. The same applies for user attributes. You may however change group memberships or user attributes either in Azure AD or on your on-premises domain. Such changes are automatically synchronized to Azure AD Domain Services.

    If there is anything else we can do for you, please feel free to post in the forum.

    Best Regards,

    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, October 16, 2017 8:25 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello,

    in this case we have only a azure environment. There is no on-premise domain.

    So that mean, that I can not run Terminal Server in Azure?

    Is there any other solution?

    Many greetings,

    Thorsten

    Monday, October 16, 2017 8:46 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Bitshaker,

    According to my knowledge, there is no other solution for your needs. We suggest you create a new thread in Azure forum to get more information.

    https://azure.microsoft.com/en-us/support/forums/?v=17.39

    Best Regards,

    William

     

    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by Bitshaker Monday, October 16, 2017 11:28 AM
    • Unmarked as answer by Bitshaker Tuesday, October 17, 2017 6:13 AM
    Monday, October 16, 2017 9:29 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Ok, thanks. I will try it on the Azure Forum: https://techcommunity.microsoft.com/t5/Compute/How-to-add-a-license-server-into-the-AD-group-quot-terminal/m-p/116810#M136


    • Edited by Bitshaker Monday, October 16, 2017 10:13 AM
    Monday, October 16, 2017 10:13 AM
  • Question
    Sign in to vote
    2
    Sign in to vote

    Hi Thorsten,

    This is a known limitation of Azure Active Directory Domain Services (AAD DS).  The current workaround is to ignore errors and manually track license usage.  Tracking license assignment using manual or other method in addition to built-in RD Licensing Manager tracking is a good idea regardless.

    In the AAD DS session at Ignite 2017 they said a fix is coming soon.  Once the fix is rolled out a member of AAD DC Administrators will be able to add the account to the group.

    What’s new in Azure Active Directory Domain Services - BRK3295

    https://youtu.be/T1Nd9APNceQ?t=35m

    -TP

    • Proposed as answer by Amy Wang_ Tuesday, October 17, 2017 4:01 AM
    • Marked as answer by Bitshaker Tuesday, October 17, 2017 6:13 AM
    Tuesday, October 17, 2017 12:36 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi TP,

    thank you for your answer and the YouTube link.

    Many greetings,

    Thorsten

    Tuesday, October 17, 2017 6:15 AM