Revoking per-device Remote Desktop Services (RDS) Client Access Licenses (CALs) can be a complex and often misunderstood process in a Windows Server environment. The key takeaway is that direct revocation of a single per-device CAL is not always possible or straightforward.
The Challenge with Revocation
You cannot directly revoke an RDS CAL that has been issued. Once a per-device CAL is issued to a client, it is permanently assigned for a set period, typically 52-89 days before it's automatically renewed upon the next connection.
This design is intended to prevent administrators from reusing CALs for different devices frequently, which is a violation of the licensing terms. However, some workarounds and limited revocation methods exist for specific scenarios.
Limited Revocation Using the RD Licensing Manager
In certain Windows Server versions, it is possible to revoke a small percentage of per-device CALs using the Remote Desktop Licensing Manager console (licmgr.exe)
Here's the general process:
- Open the RD Licensing Manager:
- On the license server, open Server Manager.
- Go to Tools > Remote Desktop Services > Remote Desktop Licensing Manager.
- Locate the CALs:
- In the console tree, expand the server and the license pack you want to manage.
- You will see a list of issued licenses, including the devices they are assigned to.
- Revoke the License:
- Right-click the specific device you want to revoke the license from.
- Select Revoke License.
Important Considerations for this method:
- This option is not always available or may be greyed out.
- This method is limited to a small percentage (e.g., 20%) of your total CALs.
- This method works better on older Windows Server versions.
The "Wait and Expire" Method
The most reliable and officially sanctioned method for reclaiming a per-device CAL is to simply let it expire. When a device no longer connects to the RDS environment, its assigned CAL will not be renewed and will eventually expire, making it available for a new device.
The RDS licensing server automatically manages this process, so no manual intervention is required. This is the intended behaviour and the simplest way to maintain licensing compliance.
Related Posts
How to configure “Licensing Mode” and “License Server to Use” on a Windows Server?
Configuring the Remote Desktop Services (RDS) licensing mode and license server on a Windows Server is a critical step for allowing more than two concurrent remote connections. The process can be done through Server Manager or Group Policy, with the steps being very similar across recent Windows Server versions (2016, 2019, 2022, and 2025). Before…
Everything you need to know about Microsoft RDS CALs
What are Microsoft RDS CALs? RDS CALs (Remote Desktop Services Client Access Licenses) are a type of license required for a user or device to connect to a Windows Server running the Remote Desktop Session Host (RDSH) role. They are legally and technically required in addition to the standard Windows Server CALs. Function: RDS CALs…
How to Remove or Delete all RDS CALs from a Windows Server?
The process for deleting all Remote Desktop Services (RDS) CALs from a Windows Server can be done through a few different methods. The most reliable method is to rebuild the license database. This process is similar across Windows Server 2016, 2019, and 2022. Warning: Deleting the license database will permanently remove all installed RDS CALs…
How to Install Active Directory on a Windows Server?
Setting up Active Directory Domain Services (AD DS) on a Windows Server involves a two-part process: installing the role and then promoting the server to a domain controller. This can be done using either the Server Manager graphical user interface (GUI) or PowerShell. Prerequisites Before you begin, ensure your server meets these requirements: A static…