Windows Server licensing genuinely confuses a lot of IT admins — the base server license is only part of the cost, and Client Access Licenses (CALs) are the part most often forgotten during planning.
The Two-Part Model
- Server license — licenses the physical/virtual server itself, based on core count for Standard/Datacenter editions
- Client Access Licenses (CALs) — separately required for each user OR device that accesses the server’s services (file shares, print services, Active Directory)
User CALs vs Device CALs
Choose User CALs when you have more devices than users (BYOD environments, employees with multiple devices) and Device CALs when you have more users than devices (shift workers sharing terminals) — picking the wrong type for your actual usage pattern means paying for more licenses than necessary.
What Doesn’t Need a CAL
Anonymous access to a public-facing website hosted on Windows Server (via IIS) generally doesn’t require CALs for those external visitors — CALs apply specifically to accessing internal server services like file/print sharing and directory services, not to serving public web content.