TS Licensing Question

[ROGERDODGE]

Hi all

I have a client with Windows 2003 Server as DC plus two standalone Windows 2000 Servers in the same domain.

One of these standalone servers is running Terminal Services and users from an external domain (SBS2000) login to the TS and use run a database application which pulls data from the other standalone W2k Server.

It would like to have thought that an external user could be set up on the TS server as a user of the TS server and then gain access to the database server. This would appear (?) not to be the case. It seems that these users have to be set up as users of the domain controller as well ? This is how it is currently set up, but I can't help but feel this is requiring more licences than they should?

The Active Directory was not oringally set up on the two W2k servers, but we plan to do so. Could this be at the heart of the issues ?

Any pointers would be gratefully received.

Roger

 

[tfg13]

I'm a little confused, so please help understand the setup. There is a domain controller, which most likely is controlling a domain correct? There are two stand-alone servers that are not part of that domain, hence stand-alone. Am I correct so far? Are the users setup on both of the stand-alone computers? If they are stand-alone, they will require a user account setup on each one seperately to fully use the database server without login requirements. The same concept would hold true if the servers were a part of a domain. There would need to be a domain account that each person should log into (through the TS).

Do this type of test. Create an account on the TS. Do not create an account on the database server. Try to connect using the account created for the test. You should not be able to connect. Now create the account on the database server.....Works?

 

[ROGERDODGE]

Hi tfg13,
Sorry, I even confused myself there!

To clarify, W2k3 Server is Domain Controller, the other two W2k0 Servers are MEMBER servers, ie they are part of the domain, but have NO Active Directory setup on them.

I did that test and it is as you said.

I think the answer then is to set up the users on the Domain Controller then they can log in to the domain (via the TS) and gain access to the database resource that way.

When I run the AD Setup Wizard on the TS it tells me it will delete all local accounts. Presumably it will then act as a kind of "back-up" domain controller ?

Rog

 

[tfg13]

Hmmmmm, you don't really want the TS to be a backup DC, all you really need to do is create the accounts in the domain, and then of course give the users the correct username and password, and it should work for you. I would not add the TS as a backup. Could cause some unwanted problems for you....

 

[ROGERDODGE]

Good advice, thanks. Is it worth having a backup DC at all? The other W2k Server?

 

[tfg13]

I really can't say that a backup is or isn't required. Are you comfortable having only one DC? Are your backups sufficient? These and other questions should be answered for the backup DC question. I will say, it probably wouldn't hurt.....

Tony