I am guessing a Mikrotik VPN remotely connected to a Windows RAS server a device cal will be needed, can anyone confirm?

MT vpn also uses a windows user login , so you could use user CAL instead

Confirmed, thank you for response. It looks like pretty much anything that connects to Windows Server needs CAL. Did a little reading on Windows 10 EULA and discovered it might be illegal to use software and host programs on Windows X.

c. Restrictions. The device manufacturer or installer and Microsoft reserve all rights (such as rights under intellectual property laws) not expressly granted in this agreement. For example, this license does not give you any right to, and you may not, (v) use the software as server software, for commercial hosting, make the software available for simultaneous use by multiple users over a network, install the software on a server and allow users to access it remotely, or install the software on a device for use only by remote users;

https://www.microsoft.com/en-us/Useterm ... nglish.htm

I might be interpreting this wrong but it looks like hosting a anything on Windows 10 is illegal