You are here: BlueCielo Meridian Enterprise Administrator's Guide > About licensing > Restricting licenses

Restricting licenses

In some environments, users should only receive Meridian Enterprise licenses if a user is a member of a specific Active Directory group. Restricted licenses can be configured in the Windows registry of the computer where the BlueCielo License Server is installed. You specify pairs of user group names and corresponding Meridian Enterprise product codes. The BlueCielo License Server service will then only grant licenses to the members of the specified group for the specified product code. If a user attempts to use one of the specified products but is not a member of the matching group, the user will be denied a license.

Note    Restricting licenses overrides reserved licenses as described in Reserving licenses. You can restrict licenses without reserving them and you can reserve licenses without restricted them. But if you want to use both license reservations and license restrictions, the users for which you want to reserve licenses must also be members of groups to which licenses have been restricted. Users without reserved licenses only need to be members of groups to which licenses have been restricted.

To restrict licenses:

  1. Open the Windows registry on the license server computer and locate the following key:
HKEY_LOCAL_MACHINE\Software\Cyco\AutoManager Meridian\CurrentVersion\Server\Licensing
  1. Create new values as necessary with the names described in the following table.
Restricted license registry values
Value Name Value

LicRestrictGroupn

The names of local or domain user groups to restrict licenses to. You can restrict licenses for multiple groups by creating one key for each group or by entering multiple group names separated by commas. The key names should be numbered from 1 to n (LicRestrictGroup1, LicRestrictGroup2, and so on). The license server will restrict the licenses of the product specified by the corresponding key LicRestrictProductn to the members of the specified groups. Each user group should be specified with the format:

<DomainName>\<DomainUserGroupName>

or

<LocalUserGroupName>

Note    If a domain group is specified, the BlueCielo License Server service must be run under an account that has permission to query the domain group memberships. By default, the service runs under the local SYSTEM account, which does not have the necessary privilege. For more information on granting the necessary privileges, see Granting membership query access and Granting domain privileges with a service account.

LicRestrictProductn

 

The product code of the Meridian product for which to restrict licenses. This value can contain multiple entries separated by semicolons. The key names should be numbered from 1 to n (LicRestrictProduct1, LicRestrictProduct2, and so on). The license server will restrict the licenses of the specified product to the members of the groups specified by the corresponding key LicRestrictGroupn.

These registry values are ignored if they do not contain valid values or if valid corresponding keys do not exist for each pair. The license server automatically ensures that only a single license of each type is claimed per user. 

The product codes to type for the LicRestrictProductn values are the first six characters of the part number portion of each license transaction key. They can be found on the Licenses page of the License Server in the Meridian Enterprise Administrator tool or on your license certificate. For example, for database connection licenses with part number M--DBLNFS001-XEE94, the product code is M--DBL.

Related concepts

About licensing

Understanding Meridian licenses

Related tasks

Registering licenses

Entering authorization keys

Reserving licenses

Viewing current license usage

Monitoring license usage

Reassigning named licenses