Anything I need to know about WinServer 2019 Standard AD GPO for 500+ users.

Richard Hanz Kalaw 21 Reputation points


Greetings and I am new to this system administration thing as I am a network engineer. I need any advice or information that I can use.

1.) My company is growing to have 500 users and counting. Any hardware requirements for WinServer 2019 Standard? Currently purchasing Dell R440. Intel Xeon Silver 4210 2.2G, 32GB RAM and 1TB SAS.
2.) Should I purchase Win 10 Pro Workstation for each user or just Win 10 Pro?
3.) We are going to use AD GPO for security and implementing policies in the company.
4.) Enlighten me about CALs please.
5.) How many CAL I need to purchase so user can use Active Directory?
6.) Do I need to purchase license for each core?
7.) Mentioned above users, which is better licensing scheme?
8.) Is CAL one-time pay per user?

Thank you very much in advance.

A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,484 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
11,700 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,540 questions
0 comments No comments
{count} votes

Accepted answer
  1. Andy YOU 3,061 Reputation points

    HI RichardHanzKalaw-0694,

    1.I think your hardware is sufficient to your windows server 2019 DC.

    2.For my IT experience, Win 10 Pro is suitable for all your domain users.
    If there are some industrial design software(like CATIA, 3DMAX etc) used by end users,meanwhile some designers' workstation with server level hardware, I think Win 10 Pro for workstation is prefered to them but "Win 10 Pro for workstation" is not necessary for them.

    3.OK.No problem.

    4.We can refer below documents.
    Understanding Windows Server Client Access Licenses (CALs)
    Please Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice.

    windows server CAL model

    For question 5-8,I think we can contact license sales or Volume Licensing Service Center support to confirm license questions.
    Volume Licensing Service Center support

    I think you need sufficient windows server 2019 per user CAL (or device CAL) for each user(or each device) like below link statement.

    6.We can refer below document.
    Windows Server 2016 Core Licensing Calculator from HPE walk through

    Please Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice.

    7.If your the number of employee is more than device(pc,phone,linux device etc), I think per user cal is better.

    8.Not exactly, if there are windows servers with OS higher windows server 2019(like windows server 2022 )in your environment in future, I think you still need to buy per user CAL of windows server 2022 for your users when they want to access windows server 2022.
    If there are windows servers with OS below windows server 2019(like windows server 2008/2012/2016),I think the answer is yes.

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Pavel yannara Mirochnitchenko 11,411 Reputation points
    1. Hardware ok. But you need 2 DCs at minimum. I belive single DC is not supported for AD.
    2. I don't understand, make no since to me :)
    3. Nice. Take a look at Microsoft Security Baseline GPO templates.
      4-8. Can't answer. Not all teckies are into licensing model, it is area of its own. If you don't find help from here, try to contact Microsoft Sales and ask them for evaluation.

    For 500 users, I would forget about AD and GPO, and to to AAD + Intune. Look at E3 and E5 lincense costs of M365 platform.