A TSCAL is a per device license, so it's not issued to a user at all, but to a device. It looks like you can't find the information you're looking for because nobody has seen the logic in making that information trackable. When you log on to a terminal server, you log on to the server - you're already logged on to the client (if it's a client that requires a logon), therefore it has to take the server name as the logon computer. If "MAIN" is a windows client, and you have security logging set up in the correct way, you should be able to determine (through DC event logs) who was logged on to the "MAIN" computer when the TSCAL was first issued to it, but I don't actually understand what you might acheive by that. The users tab in File Manager should tell you who is currently using the "MAIN" workstation. I don't think you can tell who loggen in _from_ "MAIN", you can only tell who logged in _to_ "MAIN", and that depends on you having set up the tracking for security for logons & logoffs, and on the nature of the OS on the "MAIN" workstation. I think I've managed to answer the question, but does that do anywhere near resolving the problem? Regards, Jeremy Thomas _____ From: Leone, Michael [mailto:MLeone@xxxxxxxxxxxxxxxxxxxx] Sent: donderdag 10 juni 2004 22:02 To: WinNT List (winnt-L@xxxxxxxxxxxxxxxxxxxx); Thin Client list (thin@xxxxxxxxxxxxx) Subject: [THIN] Determining which user a TS 2003 per-device CAL license is issued to I have a question. I run a WIn2003 Terminal Server. When I check the licensing, it shows that a license has been issued to "MAIN". That's the machine name of someone's PC, obviously. Yet when I check the Event Log, to match up the workstation named "MAIN" with a user, I don't see any entries that reference "MAIN". The LOGON/LOGOFF Security entries are listing users who log on/off, but the "COMPUTER" entry is always the server name. I want to be able to filter the Security log for all entries that reference the user who logged in from a machine named "MAIN"; how can I do that? The "FILTER" command only lists "COMPUTER", which is always the same in all entries (i.e., the TS server name). -- ------------------------------------------------------------ Michael Leone, Systems Administrator Philadelphia Contributionship 210 S. 4th Street, Philadelphia, PA 19106 <mailto:mleone@xxxxxxxxxxxxxxxxxxxx <mailto:mleone@xxxxxxxxxxxxxxxxxxxx> > V: 215-627-1752 x1282 F: 215-627-5354