Hi, we've had some intermittent issues with maxtokensize errors on Windows 7 and Server 2008 computers in our environment. We implemented a group policy to push out the key atHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Lsa\Kerberos\Parametersand set the value to 48000 as suggested by this article.
https://technet.microsoft.com/en-us/library/active-directory-maximum-limits-scalability(v=ws.10).aspx
However, on some servers, we are still seeing errors such as the following, and group policy is failing to apply because of it.
"The kerberos SSPI package generated an output token of size 15719 bytes, which was too large to fit in the token buffer of size 12000 bytes, provided by process id 4.
The application needs to be fixed to supply a token buffer of size at least 48000 bytes."
I have confirmed the registry key exists on the server. Can anyone suggest an explanation why this could be occurring?