We have more than enough User CALs on an RDP server. The issue is that the PAM is not using RDP licenses from the RDP license server thus only allowing 2 connections.
Applies to any PAM release.
The RDP access method for the device was configured with console mode. This works for 2 connections only.
Uncheck the Console checkbox for the RDP access method in the device editor.