Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 45 Source: TermServLicensing

Level
Description
A license could not be issued to <computer> because it is  not a member of the Terminal Server Computers group.
Comments
 
From a newsgroup post: "After our further research, we think this issue can be related to a security policy setting: Computer configuration -> Administrative templates -> Windows components -> Terminal Services\Licensing:  License Server Security Group.
If the status is set to Enabled, a local group called Terminal Services Computers is created. The Terminal Server License Server grants licenses only to computers whose computer accounts are placed in this group. When the target computer is a domain controller, this group is a domain local group.
If the status is set to Disabled, the Terminal Server License Server issues a license to any computer that requests one. The Terminal Services Computers group is not deleted or changed in any way. This is the default behavior.
If the status is set to Not Configured, the Terminal Server License Server acts the same as if the status is set to Disabled.
If you did not add any clients to this group, any machine attempting to connect to the terminal server would be denied".

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...