Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 202 Source: LicenseService

Level
Description
The product <product name> is out of licenses. Use License Manager from the Administrative Tools folder for more information on which users are out of compliance and how many licenses should be purchased.
Comments
 
From a newsgroup post: "Typically, events 202 for out of licenses are for when a member/other server in the domain is out of licenses. Events 201 typically are when the server itself is out of licenses. Look at ME327644 to find out how to configure licensing on an additional Windows 2000 Server in an SBS 2000 Network. Also, look at the link: Adding a Server to your Small Business Server 2000 Network".

ME295811 states that this behavior can occur if all of your Exchange Server 5.5 licenses are already in use.
Product: "Windows NT Server" - As per Microsoft: "This error message can occur if a Windows NT Member Server was installed with per seat licensing and you have not added any licenses to the member server."

The same event may be recorded for other products like Exchange 2000 which only supports "per seat" licensing. These events only get recorded if the "License Logging Service" service is running. You can either stop/disable this service or add the proper licensing information using the "Licensing" applet from "Administrative Tools".

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...