SQL 2008 on Windows 2008 server - licensing issue

I'm in the process of setting up a new SQL server for a web hosting company. The company hosts some 500+ websites across 4 Windows 2003 servers. SQL 2008 Standard - Processor License has been purchased. The new server is going to employ Windows 2008 Server.

The question is: SQL 2008 is Processor Licensed, but Windows 2008 has 5 CALs - how do CALs work in this case? The connections to the Windows 2008 server is going to be through those websites via ODBC connections, a handful of people using management tools connecting directly to the SQL instance, and RDP to the 2008 server. How do CALs work with SQL connections - is one user CAL needed per person on a website? Does each webserver connecting to SQL consume one CAL (requiring 4 then)? Or is it not a concern with the processor license purchased for SQL?

From serverfault $pageUsers[$entry.posts[0].author].name

• You really need to talk to your Microsoft Sales Rep to get a usable (ie will hold up in court) answer to this question.

  Folks here can offer their opinions, but what you need is something in writing from the giant corporation who's licensing you don't want to violate... :-)

  From jeffa00

• I think the CAL's are just for the developers - the people connecting to the SQL server directly. It will be your web server that is connecting to the SQL server database so you wont need a CAL per web site visitor.

  For more info see their site...

  From Chalkey

• Internal-use licensing agreements (volume, OEM, or full package product licensing) do not permit hosting. A company (such as your web hosting company) that provides any kind of hosted services for third parties using Microsoft products must instead license software under the Services Provider License Agreement (SPLA). This program does not use user or device CALs in the same way that the internal-use licenses do; see the Understanding the SPLA Licensing Models page for the available options.

  From Jay Michaud

• Cals and per processor licensing do not apply in the hosting model as you are specifically prohibited from hosting under those licenses and must acquire licenses under the service provider license agreement. Microsoft has seperate licensing to protect the windows brand; since no one's going to blame joe's hosting for getting hacked they are going to blame microsoft. There are specific architectures and guidelines (and special support) available under those plans. Without getting SPLA licensing you run the risk of being shut down at any time.

  From Jim B