If you are getting access denied while trying to log into SharePoint site 2003/2007.
This may occur if your account is a member of more than 120 groups in AD.
Resolution is either remove some groups or
Perform the following in order to set this parameter:
1.
Start Registry Editor (Regedt32.exe).
2.
Locate and click the following registry setting:
System\\CurrentControlSet\\Control\\Lsa\\Kerberos\Parameters
3.
On the Edit menu, click Add Value, and then add the following registry value:
Value name: MaxTokenSizeData type: REG_DWORDRadix: DecimalValue data: 65535
4.
Quit Registry Editor.
5. Reboot machine.
Tuesday, April 8, 2008
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment