Occasionally you might find yourself in a scenario where per-Device CALs are in use for a RDS server/farm, and those CALs are in short supply (since they are literally assigned per device, and not per user).
Unfortunately, there isn’t a clean way to do this through a GUI, or any simple way for the licenses to roll-over (that would also defeat the purpose of the Microsoft licensing model). Instead, we’re forced to use WMI to call for the licenses in use, and then issue a revoke method.
One very important note – you can only revoke the number of licenses that exceed 80% of your total license pool. EG; if you have a 30-CAL license pack installed, and you are currently using 26 of those licenses, the best you can do is revoke: (in use licenses) – (30 x 0.8) = 2 licenses.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 |
# Get all installed license packs $licensepacks = gwmi win32_tslicensekeypack | where {($_.keypacktype -ne 0) -and ($_.keypacktype -ne 4) -and ($_.keypacktype -ne 6)}; # Get total number of licenses across all license packs $totallicenses = ($licensepacks | measure-object -sum totallicenses).sum; # Define 80 percent threshold $eightypercent = [Math]::Floor([decimal]($totallicenses*0.8)); # Get all licenses currently assigned to devices $licensesinuse = gwmi win32_tsissuedlicense | where {$_.licensestatus -eq 2}; # Number of licenses in use $licensesinusecount = ($licensesinuse | measure-object).count; # How many licenses above 80 percent are in use $licensecounttorevoke = $licensesinusecount - $eightypercent; # If more than 80 percent of licenses are in use if ($licensecounttorevoke > 0) { # Select and revoke only the number of licenses above 80%, oldest first $licensestorevoke = $licensesinuse | sort expirationdate | select -first $licensecounttorevoke; $licensestorevoke.revoke(); } |
Alternatively, if you weren’t particular about removing the oldest assigned licenses first, you could reduce this code down to just 2 lines. Any licenses in use above the 80% mark would be revoked, otherwise nothing will happen:
|
|
$licensesinuse = gwmi win32_tsissuedlicense | where {$_.licensestatus -eq 2}; $licensesinuse.revoke(); |