I'm upgrading our Citrix environment and have set up new RDS License servers on Windows Server 2022, moving from an older 2016 setup. However, I'm encountering an error with the session host server that states it's not properly configured, despite having applied group policies and registry changes to link it to the new RDS servers. Our Citrix setup is in a more secure, DMZ-style network, so we collaborated with our network team to ensure the necessary ports are open. Currently, they've only opened port 135 to the RDS servers, but I need advice on additional ports listed in the RDS Licensing section of the requirements guide found here: https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/service-overview-and-network-port-requirements#references.
Does this mean the Citrix session host must reach the randomly allocated high TCP ports on the RDS servers, or are these just for return traffic from the RDS servers to Citrix? Another thing: when we set up the RDS servers, they were given 2016 temporary licenses, but both the RDS and Citrix servers are on Windows Server 2022. Could this be causing issues with the Citrix servers unable to receive a temporary license because they're higher than OS 2016?
2 Answers
Are you still using 2016 RDS CALS, or have you upgraded to 2022? You also need to ensure that your RDS License server is authorized as a Network Policy Server in Active Directory. It's been a while since I set this up, so I hope this helps!
Did your firewall team really only open port 135? That's usually not enough for RDS. You might want to check on additional ports required for licensing, especially the high TCP ports that should be accessible from the Citrix session host to the RDS servers. Otherwise, you could run into more connection issues.
Yeah, they mentioned they've opened other ports for AD and DNS, but specifically for RDS licensing, only port 135 is available right now.
We upgraded to 2022 licenses under volume licensing when we set up the new RDS servers. I believe the licensing should be okay, but the temporary licenses being from 2016 is definitely concerning me.