Microsoft AD Users and CAL License Requirement

Ganesh 0 Reputation points
2025-02-07T09:35:32.7066667+00:00

A customer is looking for a Microsoft Active Directory (AD) solution and plans to onboard 500 users to the domain.

  • The 500 users will be part of AD and use it solely for domain login authentication.

Would Client Access Licenses (CALs) be required in this scenario?

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
13,674 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,868 questions
Windows 11
Windows 11
A Microsoft operating system designed for productivity, creativity, and ease of use.
10,697 questions
Windows Licensing
Windows Licensing
Windows: A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.Licensing: Rules, regulations, and restrictions that define how software can be used and distributed.
133 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Zunhui Han 3,100 Reputation points Microsoft Vendor
    2025-02-10T16:16:39.43+00:00

    Hello,

    Thank you for posting in Q&A forum.

    Yes, Client Access Licenses (CALs) would be required in this scenario.

    Microsoft Active Directory (AD) is a directory service for Windows domain networks that provides centralized management of network resources. When implementing AD in an organization and onboarding users to the domain, Client Access Licenses (CALs) are necessary to grant users the legal right to access the server-side services provided by AD.

    There are two types of CALs:

    User CALs: Required for every user who accesses the server.

    Device CALs: Required for every device that accesses the server, regardless of the number of users.

    You can choose either based on what makes the most sense for your organization's structure and needs. In your case, if these 500 users are each going to authenticate against the AD domain from potentially different devices, then User CALs would likely be more appropriate.

    I hope the information above is helpful.

    Best regards

    Zunhui

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.