Tyler, No traffic is filtered by the VPN. I do not see this issue with Windows 2000 clients connected to the same VPN tunnel server. Just these new Windows XP Pro clients are exhibiting the problem. Question: If the client can grab the first (temporary TS CAL), what would prevent it from grabbing the permanent CAL on a subsequent attempt? Thanks for your help, Rob -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Tyler Kinchen Sent: Tuesday, June 13, 2006 11:25 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Terminal Server Licensing Issue - I think?? Need help Is any traffic being blocked throught the VPN? Regards, Tyler Kinchen On 6/13/06, Armstrong, Robert <robert.armstrong@xxxxxxxxxxxxx> wrote: > Tyler, > > Thanks for the response. To answer your first question, yes, I see > the same issue when logged in as the local Administrator. > > Also, I have all of the Citrix servers using a DefaultLicenseServer > and I have verified name resolution and communication between each > Citrix server and the TS licensing server > > PLEASE NOTE: when the affected machines are connected to the local > LAN, everything works perfectly and the user can open publications > with no problems. It has something to do with being connected > remotely through VPN, but I can't put my finger on it. I have name > resolution, I get the temporary licenses issued with no problems, I > see all pubs in CPN, I just can't get that permanent license when connected remotely. > > Thanks, > Rob > > -----Original Message----- > From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On > Behalf Of Tyler Kinchen > Sent: Tuesday, June 13, 2006 11:00 AM > To: thin@xxxxxxxxxxxxx > Subject: [THIN] Re: Terminal Server Licensing Issue - I think?? Need > help > > Rob, when a client initially connects to a TS or Citrix server, the TS > Licensing server issues it a temporary TS CAL. It is only on a second > connection that a permanent TS CAL is issued. It sounds as if the > client is unable to get a permanent TS CAL the second time it connects. > Do you see this behavior with an adminstrative account logged in to > the laptop? If not, I would check the registry permissions on the > MSLicensing key or below. > > I also think Mike's suggestion about trying to specify a specific TS > License server is a good idea. > > Let us know how it goes. > > Regards, > > Tyler Kinchen > > > > On 6/13/06, Armstrong, Robert <robert.armstrong@xxxxxxxxxxxxx> wrote: > > Tyler, > > > > Thanks for your reply. > > > > The AD Server is running Windows 2000 Server SP4 and the TS > > Licensing server is running Windows 2000 Server SP4. > > > > Regards, > > Rob > > > > -----Original Message----- > > From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] > > On Behalf Of Tyler Kinchen > > Sent: Friday, June 09, 2006 9:46 AM > > To: thin@xxxxxxxxxxxxx > > Subject: [THIN] Re: Terminal Server Licensing Issue - I think?? Need > > help > > > > Robert, what version of Windows is your domain and TS licensing > server? > > > > Regards, > > > > Tyler Kinchen > > > > > > On 6/8/06, Armstrong, Robert <robert.armstrong@xxxxxxxxxxxxx> wrote: > > > > > > > > > Greetings, > > > > > > We recently deployed several new laptops to remote users. These > > > users > > > > > establish a VPN tunnel via Checkpoint's Secure Remote Client and > > > then try to access Citrix MF XPe SP3 FR3 publications via Citrix > > > Program Neighborhood but cannot. Here is what happens: > > > > > > 1. User establishes VPN tunnel with no problems (user can access > > > file > > > > > shares, Exchange e-mail, web services etc. with no problems) 2. > > > User opens CPN and all assigned publications are available in the > > > application set. > > > 3. IF there is no > > > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSLicensing\Store > > > key, and the user runs one of the publications, the client > > > (Windows XP > > > > > Pro > > > SP2 ) retrieves a client license from the TS Licensing server and > > > the Citrix publication opens with no problems. > > > 4. Subsequent attempts to open any publications fail. > > > 5. IF the > > > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSLicensing\Store is > > > deleted, the user can open a single publication one time and then > > > any subsequent attempts to run a published app fail. No connect > > > errors > > appear. > > > The connect status dialog appears, rolls to 100% and then simply > > disappears. > > > > > > Here is what I've verified: > > > > > > 1. The problem occurs with ICA and RDP. (e.g. we can open a > > > remote > > > > desktop connection to any Citrix server (via RDP) one time only > > > and subsequent attempts fail until the > > > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSLicensing\Store is > > > deleted) > > > 2. Client machine has full WINS and DNS query capability through > > > the VPN and can resolve hostnames and FQDNs for any server on our > > > private > > network. > > > 3. When the client machine is connected locally to the network, > > > the > > > > problem described above DOES NOT occur. > > > 4. We've checked the permissions on the > > > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSLicensing\Store key and > > > user > > > > has full control permissions on the key. > > > > > > If anybody has any suggestions or additional troubleshooting ideas > > > on resolving this issue, they would be greatly appreciated. > > > > > > Thank you, > > > Robert Armstrong > > > > > > > > > ________________________________ > > > This message may contain confidential and/or privileged > information. > > > > > If you are not the intended recipient or authorized to receive > > > this for the intended recipient, you must not use, copy, disclose > > > or take > > > > any action based on this message or any information herein. If > > > you have received this message in error, please advise the sender > > > immediately by sending a reply e-mail and delete this message. > > > Thank > > you for your cooperation. > > > ________________________________ > > > > > ************************************************ > > For Archives, RSS, to Unsubscribe, Subscribe or set Digest or > > Vacation > > > mode use the below link: > > //www.freelists.org/list/thin > > ************************************************ > > > > > > This message may contain confidential and/or privileged information. > If you are not the intended recipient or authorized to receive this > for the intended recipient, you must not use, copy, disclose or take > any action based on this message or any information herein. If you > have received this message in error, please advise the sender > immediately by sending a reply e-mail and delete this message. Thank > you for your cooperation. > > ************************************************ > > For Archives, RSS, to Unsubscribe, Subscribe or set Digest or > > Vacation > > > mode use the below link: > > //www.freelists.org/list/thin > > ************************************************ > > > ************************************************ > For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation > mode use the below link: > //www.freelists.org/list/thin > ************************************************ > > This message may contain confidential and/or privileged information. If you are not the intended recipient or authorized to receive this for the intended recipient, you must not use, copy, disclose or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by sending a reply e-mail and delete this message. Thank you for your cooperation. > ************************************************ > For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation > mode use the below link: > //www.freelists.org/list/thin > ************************************************ > ************************************************ For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: //www.freelists.org/list/thin ************************************************ This message may contain confidential and/or privileged information. If you are not the intended recipient or authorized to receive this for the intended recipient, you must not use, copy, disclose or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by sending a reply e-mail and delete this message. Thank you for your cooperation. ************************************************ For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: //www.freelists.org/list/thin ************************************************