Hello to all, I'm finishing a cross-forest migration project and users on target forest still have their source SIDs on SIDHistory attribute (they will cleaned up, but not now). For this reason some users are getting errors (token bloat problem) when accessing a specific App. that runs on IIS 6.0 in W2K3 server .
Article http://support.microsoft.com/kb/2020943 explains that on this case one should remove some user's groups or change a couple of registry parameters on IIS server. As removing some users' groups is not practical (I have hundreds of users that use this App.) the acceptable option is to change IIS paramenters. After reading the article and considering this context, I have some questions:
1- If I change MaxFieldLength and MaxRequestBytes parameters on IIS Server should I change MaxTokenSize (based on the article, if I change MaxFieldLength and MaxRequestBytes to maximum I should change MaxTokenSize for its maximum (48KB) also and on what machines)?
2- If I change the two firts paramenters with no max. values for what value should I change MaxTokenSize (if so) and where (all machines on domain, just DCs, just machines that access the mentioned App., etc). ?
Best regards, EEOC.