Hello

I am invesigating a user who is having sporadic issues with authentication

This user is a member of a lot of groups so I have been taking this route:

https://support.microsoft.com/en-us/kb/327825

http://blogs.technet.com/b/surama/archive/2009/04/06/kerberos-authentication-problem-with-active-directory.aspx

These two articles deal with the concept of the users maximum kerberos token size

I have found a script which does a calculation of said size:

http://www.jhouseconsulting.com/2013/12/20/script-to-create-a-kerberos-token-size-report-1041

However in my environment there is no setting of the maximum kerberos size under

HKLM\System\CurrentControlSet\Control\Lsa\Kerberos\Parameters

My question is, what is the default size for the token size when there isnt one set in the registry?

Server 2003 Service Pack 2 (domain controllers)
Server 2008 R2 Service pack 1 (SQL server)
Windows 7 Service pack 1 (Client)

I already know that server 2003 is not supported - our organisation has a service agreement with microsoft for extended support

Domain functional level is still server 2003

Any help will be appreciated

Just an update on this:

http://www.microsoft.com/en-au/download/details.aspx?id=1448

Tokensz will show the defaullt limit for token size for your environment

Ive asked the user to run this accross the servers that he is having problems with