How can I increase the kerberos packet size on Domain Controllers

Question

We have CIFS server where we have created shared folders. When users access it, some times it works fine and some times give error "Access Denied". I found below events in my DC. Please may I know what is the issue? How can I increase the kerberos packet size in Domain Controllers 2019??

A ticket to the service cifs/CIFS-Server01 is issued for account ******@xyz.com. The size of the encrypted part of this ticket is 14583 bytes, which is close or greater than the configured ticket size threshold (12000 bytes). This ticket or any additional tickets issued from this ticket might result in authentication failures if the client or server application allocates SSPI token buffers bounded by a value that is close to the threshold value.

The size of ticket is largely determined by the size of authorization data it carries. The size of authorization data is determined by the groups the account is member of, the claims data the account is setup for, and the resource groups resolved in the resource domain.

Events id 31

Answer 1

Enabled SMB signing on storage side and all works well now.