Server 2008 R2 - problem s Licenčním serverem terminalove sluľby

[Jan H�bner]

Cht�l bych poprosit o radu na DC mam nainstalovany Licen�n� server
terminalove slu�by, mysl�m �e je v�e nastavene jak by m�lo b�t. P�esto se v
systemu zobrazuje hla�ka viz n�e.

Licen�n� server Vzd�len� plochy nem�e aktualizovat atributy licence pro
u�ivatele fakt1 v dom�n� slu�by Active Directory SRVJBC.LOCAL. Ujist�te se,
�e je ��et po��ta�e pro licen�n� server �lenem skupiny Licen�n� servery
termin�lov�ho serveru v dom�n� slu�by Active Directory v SRVJBC.LOCAL.
Je-li licen�n� server nainstalov�n do �adi�e dom�ny, mus� b�t ��et S�ov�
slu�by tak� �lenem skupiny Licen�n� servery termin�lov�ho serveru.
Je-li licen�n� server nainstalov�n do �adi�e dom�ny po p�id�n� p��slu�n�ch
��t� do skupiny Licen�n� servery termin�lov�ho serveru, je nutn� restartovat
slu�bu Licencov�n� vzd�len� plochy, aby sledovala nebo zapisovala do sestavy
vyu�it� licenc� VP CAL v�zan�ch na u�ivatele.
K�d chyby syst�mu Win32: 0x80070005

prokontroloval jsem dle hla�ky a nic

dokonce jsem pouzil dle rad na inetu tento script a nic

Napad� n�koho n�co ??

p�edem d�kuji za radu

Honza H�bner

=============================================
# Description: This script will add missing permissions for the Terminal
Server License Server group to user objects in Active Directory.
# This may solve problems with TS CALs not beeing issued and event id
4105 being logged at the license server.

# Constants
$URL = "LDAP://DC=yourdomain,DC=com";

cls
$root = New-Object DirectoryServices.DirectoryEntry $URL
$ds = New-Object DirectoryServices.DirectorySearcher
$ds.SearchRoot = $root
$ds.filter = "objectCategory=Person"
$src = $ds.findall()
write-host "Found" $src.count "user objects.`n"
$src | %{
$de = $_.getdirectoryentry()
$accessrules = $de.get_objectsecurity().getaccessrules($true, $false,
[System.Security.Principal.SecurityIdentifier]) | ?{$_.ObjectType -eq
"5805bc62-bdc9-4428-a5e2-856a0f4c185e"}
if ((measure-object -inputobject $accessrules).count -eq 0)
{
$ar = new-object
System.DirectoryServices.ActiveDirectoryAccessRule([System.Security.Principal.SecurityIdentifier]"S-1-5-32-561",
48, "Allow", [guid]"5805bc62-bdc9-4428-a5e2-856a0f4c185e")
$de.get_objectsecurity().addaccessrule($ar)
$de.commitchanges()
write-host -f yellow ("Added:`t" + $de.properties["sAMAccountName"])
start-sleep -m 200
}
else
{
write-host -f green ("OK:`t" + $de.properties["sAMAccountName"])
}
}
=============================================