Home
  •  

Licensing Server started with warnings

LS_started_with_warnings_2003 (Rule)

Knowledge Base article:

Summary

Terminal Server Licensing started with warning(s).

This rule covers the following event IDs:

4, 18, 19, 24

Other Information

The event IDs described in this topic apply to Windows® 2000 Server and Windows Server 2003 operating systems.

Causes

Possible causes include:

Resolutions

Possible resolutions include:

Event 4: Reactivate Terminal Server Licensing by using the Telephone connection method in the Licensing Wizard. You can also contact the Microsoft Clearinghouse to reissue license packs. Access the Microsoft Clearinghouse by using the Terminal Server Licensing administrative tool.

Events 19, 24: (Microsoft® Windows Server™ 2003 operating systems only) Verify that crypt32.dll has installed correctly. Check Event Viewer for crypt32.dll related errors. If errors are found, reinstall Terminal Server Licensing and contact the Microsoft Clearinghouse to reissue license packs. Access the Microsoft Clearinghouse by using the Terminal Server Licensing administrative tool.

Delete the MSLicensing key on the client computer:

Delete X509 certificate registry keys on the terminal server:

Event 18: Contact Microsoft to activate Terminal Server Licensing, and install licenses.

Element properties:

TargetMicrosoft.Windows.Server.2003.TerminalServicesLicensingServerRole
CategoryEventCollection
EnabledTrue
Event SourceTermServLicensing
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
Licensing Server started with warnings
{0}
Event LogSystem
CommentMom2005ID='{8AEC6D24-17D1-4F97-9A76-84832D614D86}'

Member Modules:

ID Module Type TypeId RunAs 
Event_Data_Source DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="LS_started_with_warnings_2003" Target="Microsoft.Windows.Server.2003.TerminalServicesLicensingServerRole" Enabled="onEssentialMonitoring" Remotable="true" Comment="Mom2005ID='{8AEC6D24-17D1-4F97-9A76-84832D614D86}'">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="Event_Data_Source" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>System</LogName>

      <Expression>

        <And>

          <Expression>

            <RegExExpression>

              <ValueExpression>

                <XPathQuery>EventNumber</XPathQuery>

              </ValueExpression>

              <Operator>MatchesMOM2005RegularExpression</Operator>

              <Pattern>^(-1073676284|-1072627688|18|19)$</Pattern>

            </RegExExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>TermServLicensing</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>1</Severity>

      <AlertOwner>$Data/PublisherName$</AlertOwner>

      <AlertMessageId>$MPElement[Name="LS_started_with_warnings_2003.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDescription$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue/>

      </Suppression>

    </WriteAction>

  </WriteActions>

</Rule>