Only 2 users are allowed to login to workgroup server via cyberark at the same time

Question

Hi,

We have a scenario where a workgroup server is enrolled to cyberark and post recent upgrade of cyberark to newer version any local user accessing this workgroup server gets a popup that user will be logged out in 60mins.

Cyberark servers are using per user CAL, however we do understand this is default behavior of the per user CAL.

Strangely now the issue is auto fixed, there is no such popup showing up nor is the local user getting auto logged out after 60mins . The question is how this even working, is the cyberark enrolled workgroup server picking CAL from cyberark server or itself (it can have CAL enrolled since it's not domain joined) and it allows only 2 users to access the server at a time.

Prior to Cyberark upgrade server allowed many users to access the server at a time and also there was no warning of users getting logged out in 60mins

Answer 1

Hello,

May I know what is your Server version, is it Windows Server 2019?

Typically, this message is caused by the soft enforcement licensing feature that was introduced in Windows Server 2016 for per-device licensing, and in Windows Server 2019 for per-user licensing. It indicates that there's a problem in the RD Licensing server, or a problem that's preventing communication between the RD Licensing server and the Remote Desktop Session Host (RD Session Host) server.

Please refer to this article for more information:

Your session will be disconnected in 60 minutes message when you connect to RDS - Windows Server | Microsoft Learn

In a per-user licensing scenario (Windows Server 2019 only), this issue can usually be resolved after all remote desktop servers have the latest updates installed.

I am not familiar with the CyberArk system, and according to your description, the problem resolves automatically without changing the configuration or restarting the server, which may be due to RDS licensing or some automatic updates or tweaks done in the background by the CyberArk system. If the problem reappears, please contact us.

Best regards

Jacen

Answer 2

Hi Jacen,

Thanks for the details.

Yes, my Cyberark and workgroup servers are of OS 2019. Both servers are patched with this month latest security patch last weekend.

Let me refer back to my RDS servers if they have latest patch.