AD / kerberos problem with large output token

[fvharen]

When I log on the network with a user which is member of more then 500 AD groups it generates the following system event:

The kerberos SSPI package generated an output token of size 5418 bytes, which was too large to fit in the 5407 buffer buffer provided by process id 0. If the condition persists, please contact your system administrator

Is there a way to increase the buffer, or another solution?

 

[fvharen]

I also get

The kerberos SSPI package generated an output token of size 5407 bytes, which was too large to fit in the 2EE0 buffer buffer provided bu process id 0. If the condition persists, please contact your system administrator

 

[porkchopexpress]

Why do you have a user that is a member of 500 groups?

 

[fvharen]

I am working on an application that rebuild the user's startmenu. The network uses deep nesting of groups
In some testscenario's i am confronted with this very large groupmembership.

 

[porkchopexpress]

Take a look at this MS KB article.

http://support.microsoft.com/kb/327825