The difference between an RDS User CAL and an RDS Device CAL is licensing assignment: A User CAL licenses a single human user to access Remote Desktop Services from unlimited devices (laptops, desktops, tablets). A Device CAL licenses a single physical workstation to connect to the server, regardless of how many employees share that computer.
Your employees have dedicated accounts and connect to Remote Desktop from multiple endpoints (e.g. work PC, home laptop, iPad, or mobile phone while traveling).
You run shift-work or shared workstation environments (e.g. call centers, warehouses, hospitals) where multiple staff use the exact same computer across shifts.
When deploying Remote Desktop Services (RDS) on Windows Server 2022 or Windows Server 2025, licensing is one of the easiest areas to overspend. In addition to licensing your base server cores, Microsoft legally requires a Client Access License (CAL) for every user or device establishing a remote desktop connection. Choosing the wrong license type can easily double your IT licensing expenses.
To determine the most affordable licensing structure for your enterprise, use this simple ratio:
Yes! Microsoft Remote Desktop Licensing Manager allows deploying both User and Device CAL license packs on the exact same RDS Licensing Server host. However, in practice, mixing license modes on a single Remote Desktop Session Host (RDSH) collection is not recommended because the RDSH host mode must be configured to either "Per User" or "Per Device" in Group Policy (gpedit.msc > Administrative Templates > Windows Components > Remote Desktop Services > RD Licensing).
Yes. A standard Windows Server CAL licenses access to basic server services (Active Directory, file shares, print). An RDS CAL is an additional requirement specifically for establishing remote desktop graphical sessions.
If using Per-Device mode, any new unlicensed device attempting to connect will receive a licensing error and be blocked. If using Per-User mode, Windows Server logs event warnings but generally allows connections under a grace policy.
Yes, Microsoft RD Licensing allows reassigning a Device CAL to replacement hardware after 90 days, or immediately in the event of hardware failure.