SharePoint Tidbit – Enabling license enforcement


Hello All,

I have a customer who recently wanted to create a mixed license farm, and here are the steps I sent him.  In this scenario they had an enterprise licensed farm and wanted to enforce Standard licensing on a specific group of users.

Since they had multiple domains they are going to need to take the following steps to be able to enforce licensing across all domain users.

  1. Create in the CORP\ domain a group called ‘Farm SharePoint Standard Cal’ and this needs to be a domain local group,
  2. In each of the other domains you will create a group called ‘Domain SharePoint Standard Cal’ and this needs to be a global group,
  3. Add each of the ‘Domain SharePoint Standard Cal’ groups to the ‘Farm SharePoint Standard Cal’ group
  4. You can then add users to the ‘Domain SharePoint Standard Cal’

For more information about groups in Active Directory and how you can use them, please read this

Next we need to enforce User licensing by running the following command on any SharePoint server and from the SharePoint Management Shell

Enable-SPUserLicensing

Then you need to create an  SPUserLicenseMapping object and add it to the enforcemen

$LicenseMapping = New-SPUserLicenseMapping -SecurityGroup “Farm SharePoint Standard Cal” -License Standard
Add-SPUserLicenseMapping -Mapping $LicenseMapping

NOTE: To find license types that you can enforce run the command Get-SPUserLicense

You can manage the License enforcement and Mappings via these commands

Add-SPUserLicenseMapping
Disable-SPUserLicensing
Enable-SPUserLicensing
Get-SPUserLicense
Get-SPUserLicenseMapping
Get-SPUserLicensing
New-SPUserLicenseMapping
Remove-SPUserLicenseMapping

Hope this helps you

Pax

Comments (2)

  1. Tom Pacso says:

    Hi!
    Is there a way I can enforce that users who are not in this group, can not open Sharepoint at all?
    We have 10 User CALs, and we have a sec. group containing 10 users.

    How can I ensure that users outside this Sec. Group can’t open Sharepoint?

    1. Hello Tom,

      This article is about enabling mixed license farm and has nothing to do with SharePoint permissions. With that being said if you want to block a user or group of users from accessing SharePoint I suggest you look at User Policies https://docs.microsoft.com/en-us/SharePoint/administration/manage-permission-policies-for-a-web-application

Skip to main content