Effective MaxTokenSize when no registry value is present on Server 2016?

S

ShaunWI

On Server 2016, if there is no HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters\MaxTokenSize value present, what is the effective MaxTokenSize? Is it still the "default" 48k, as I've seen documented in various places on the internet? I've seen some other articles clarify that the default MaxTokenSize value is 48000, which makes me think it may be dependent on the registry value existing. We are seeing some Event ID 31's being logged referring to a max size of 12000 bytes, but I think this is a configurable threshold used just for logging that is unrelated to the actual MaxTokenSize in use on the system.

Continue reading...
 
Back
Top Bottom