Anything I need to know about WinServer 2019 Standard AD GPO for 500+ users.

Richard Hanz Kalaw 21 Reputation points
2021-05-25T09:37:50.687+00:00

Hi,

Greetings and I am new to this system administration thing as I am a network engineer. I need any advice or information that I can use.

1.) My company is growing to have 500 users and counting. Any hardware requirements for WinServer 2019 Standard? Currently purchasing Dell R440. Intel Xeon Silver 4210 2.2G, 32GB RAM and 1TB SAS.
2.) Should I purchase Win 10 Pro Workstation for each user or just Win 10 Pro?
3.) We are going to use AD GPO for security and implementing policies in the company.
4.) Enlighten me about CALs please.
5.) How many CAL I need to purchase so user can use Active Directory?
6.) Do I need to purchase license for each core?
7.) Mentioned above users, which is better licensing scheme?
8.) Is CAL one-time pay per user?

Thank you very much in advance.

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,746 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,122 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,851 questions
0 comments
Accepted answer
  1. Andy YOU 3,071 Reputation points
    2021-05-26T06:06:53.62+00:00

    HI RichardHanzKalaw-0694,

    1.I think your hardware is sufficient to your windows server 2019 DC.

    2.For my IT experience, Win 10 Pro is suitable for all your domain users.
    If there are some industrial design software(like CATIA, 3DMAX etc) used by end users,meanwhile some designers' workstation with server level hardware, I think Win 10 Pro for workstation is prefered to them but "Win 10 Pro for workstation" is not necessary for them.

    3.OK.No problem.

    4.We can refer below documents.
    Understanding Windows Server Client Access Licenses (CALs)
    https://community.hpe.com/t5/Alliances/Understanding-Windows-Server-Client-Access-Licenses-CALs/ba-p/7001696#.YK3icXnivPY
    Please Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice.

    windows server CAL model
    https://www.microsoft.com/en-us/licensing/product-licensing/client-access-license?SilentAuth=1&wa=wsignin1.0

    For question 5-8,I think we can contact license sales or Volume Licensing Service Center support to confirm license questions.
    Volume Licensing Service Center support
    https://www.microsoft.com/licensing/servicecenter/default.aspx

    I think you need sufficient windows server 2019 per user CAL (or device CAL) for each user(or each device) like below link statement.

    6.We can refer below document.
    Windows Server 2016 Core Licensing Calculator from HPE walk through
    https://community.hpe.com/t5/Alliances/Windows-Server-2016-Core-Licensing-Calculator-from-HPE-walk/ba-p/6996398#.YK3kCXnivPY

    Please Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice.

    7.If your the number of employee is more than device(pc,phone,linux device etc), I think per user cal is better.

    8.Not exactly, if there are windows servers with OS higher windows server 2019（like windows server 2022 ）in your environment in future, I think you still need to buy per user CAL of windows server 2022 for your users when they want to access windows server 2022.
    If there are windows servers with OS below windows server 2019(like windows server 2008/2012/2016),I think the answer is yes.

    ============================================
    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Pavel yannara Mirochnitchenko 11,716 Reputation points
    2021-05-25T11:43:56.627+00:00
    1. Hardware ok. But you need 2 DCs at minimum. I belive single DC is not supported for AD.
    2. I don't understand, make no since to me :)
    3. Nice. Take a look at Microsoft Security Baseline GPO templates.
      4-8. Can't answer. Not all teckies are into licensing model, it is area of its own. If you don't find help from here, try to contact Microsoft Sales and ask them for evaluation.

    For 500 users, I would forget about AD and GPO, and to to AAD + Intune. Look at E3 and E5 lincense costs of M365 platform.