All Products
Search
Document Center

The error message "No remote desktop authorization server can provide a license" is prompted for remote login to a Windows instance

Last Updated: May 20, 2022

Disclaimer: This article may contain information about third-party products. Such information is for reference only. Alibaba Cloud does not make a guarantee in any form of the performance and reliability of the third-party products, and potential impacts of operations on these products.

Issue

Log on to the ECS instance of the Windows system through a remote connection on the local client. Even if you enter the correct user and password, the remote connection cannot be normal and the following error message is displayed.

The remote session is interrupted because there is no remote desktop authorization server to provide the license. Please contact the server administrator. 

Use the management terminal to connect to the Windows instance. For more information, see Overview. Open RD Authorization Diagnostics. The following error message appears.

The authorization mode of the remote desktop session host server is not configured. The grace period for the 
Remote Desktop Session Host server has expired, but this RD Session Host server does not use any licenses.

Cause

  • Log on to another user
    The account is logged on to another user. The RDP-TCP configuration for Terminal Services limits each user to only one session. Therefore, other sessions cannot be established.
  • Installed Remote Desktop Session Host Role
    • If the remote desktop session host role is installed in the system, this feature is free of charge for 120 days. After that, you need to pay for it. If you do not pay, you will not be able to connect through the management terminal.
    • Under normal circumstances, Windows servers provide free remote desktop management authorization for two users by default. If you have higher connection requirements, you need to configure the remote desktop session host server role, and purchase and configure the corresponding authorization before you can use more remote desktop management concurrency.
    • On the other hand, after the remote desktop session host role is configured, the default free connection authorization for both users will be canceled. If the relevant authorization is not configured correctly, the remote desktop cannot be connected and the preceding error message appears.

Solution

Take note of the following items:

  • Before you perform high-risk operations such as modifying the specifications or data of an Alibaba Cloud instance, we recommend that you check the disaster recovery and fault tolerance capabilities of the instance to ensure data security.
  • Before you modify the specifications or data of an Alibaba Cloud instance, such as an Elastic Compute Service (ECS) instance or an ApsaraDB RDS instance, we recommend that you create snapshots or enable backups for the instance. For example, you can enable log backups for an ApsaraDB RDS instance.
  • If you have granted specific users the permissions on sensitive information, such as usernames and passwords, or submitted sensitive information in the Alibaba Cloud Management Console, we recommend that you modify the sensitive information at the earliest opportunity.

According to the actual situation, refer to the following two solutions:

Login by Others

To cancel the RDP-TCP limit, each user can only have one session. The specific steps are as follows:

  1. Use a management terminal to connect to a Windows instance. For more information, see Use a management terminal.
  2. Select Start and click Run. In the Open box, enter the gpedit.msc and click OK.
  3. On the Local Group Policy Editor page, choose Computer Configuration > Management Templates > Windows Components, and double-click Remote Desktop Service.
  4. Double-click Remote Desktop Session Host > Connect.
  5. Click Limit Connections. In the dialog box that appears, select Enabled. In the Maximum Connections Allowed for RD dialog box, enter the required maximum number of connections and click OK.
    Note: Maximum number of RD connections allowed In this example, 3 is used.
  6. Select Start and click Run. In the dialog box that appears, enter a cmd and click OK. Open the command line and run the following command:
    gpupdate
    If an output similar to the following one is displayed, Python is installed.

The Remote Desktop Session Host role is installed

If the remote desktop session host is installed, the remote Windows server cannot be installed. Please refer to the following two solutions.

Method 1

After configuring the remote desktop session host server, purchase and configure the corresponding certificate authorization on the Microsoft official website. For more information, see Microsoft official documentation.

Method 2

Delete the Remote Desktop Session Host role and use the default free connection authorization for two users. Follow these steps to configure different versions of Windows servers.

Windows Server 2012 operating system
  1. Use a management terminal to connect to a Windows instance. For more information, see Use a management terminal.
  2. Select Start and click Run. In the dialog box that appears, enter a ServerManager and click OK.
  3. On the Server Manager page, choose Management > Delete Role and Features.
  4. Go to the Delete Features and Roles page, click Next, and then click Next.
  5. In the Role section, clear Remote Desktop Service and Next.
  6. Restart the instance within a Windows instance.
Windows Server 2008 operating system
  1. Use a management terminal to connect to a Windows instance. For more information, see Use a management terminal.
  2. Select Start and click Run. In the dialog box that appears, enter a servermanager.msc and click OK.
  3. On the Server Management page, click Roles, right-click Remote Desktop Service, and then select Delete Role Service.
  4. In the dialog box that appears, clear Remote Desktop Session Host, click Next, and then click Delete. Wait until the configuration is complete.
  5. Restart the instance within a Windows instance.
Windows Server 2003 operating system
  1. Use a management terminal to connect to a Windows instance. For more information, see Use a management terminal.
  2. Choose Start > Control Panel.
  3. Choose Add or Remove Programs > Add or Remove Windows Components.
  4. Deselect Terminal Server and click Next. In the message that appears, click Finish.
  5. Restart the instance within a Windows instance.

Applicable scope

  • Elastic Compute Service