Changing WindowsTokenLifetime and LogonTokenCacheExpirationWindow
Hello, SharePoint administrators have sent me this article and ask me to change these two parameters of AD DS:

WindowsTokenLifetime = 10 minutes (default 10 hours)
LogonTokenCacheExpirationWindow = 2 minutes (default 10 minutes)

https://sergeluca.wordpress.com/2013/07/06/sharepoint-2013-use-ag-groups-yes-butdont-forget-the-security-token-caching-logontokencacheexpirationwindow-and-windowstokenlifetime/

Domain controllers have Windows Servers 2012 R2, one site of AD and AD DS-dependent applications like Exchange.

My AD DS has about 300 users.

My question is whether the change will affect the operation of AD DS or any dependent application of AD DS

thank you
July 19th, 2015 3:22am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics