Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1003 Source: TermService

Source
Level
Description
The terminal service client has provided an invalid license.
Comments
 
As per Microsoft: " This error message is caused by a change in the certificates that are used by the Microsoft Clearinghouse to authorize Terminal Services Licensing servers". See ME323597 to fix this problem.
According to Microsoft: "A corrupted or invalid license is being supplied by the client when it connects to the Terminal Server-based server". See the link below for details. A fix is available from Microsoft."

Citrix document id CTX564283 provides a troubleshooting approach for this type of events.
ME294326 is also correct, but some additional infos may be helpful. To correct this, delete the following registry key from the client device''s registry: HKEY_LOCAL_MACHINE\Software\Microsoft\MSLicensing\HardwareID.
After this key has been deleted, the terminal server will be able to request the license again from the license server and re-issue it to the client device.
To correct this, delete the following registry key from the client device's registry: HKEY_LOCAL_MACHINE\Software\Microsoft\MSLicensing. After this, the terminal server will be able to request the license again from the license server and re-issue it to the client device.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...