How can I increase the kerberos packet size on Domain Controllers

Mohd Arif 946 Reputation points
2023-10-25T11:06:39.1466667+00:00

We have CIFS server where we have created shared folders. When users access it, some times it works fine and some times give error "Access Denied". I found below events in my DC. Please may I know what is the issue? How can I increase the kerberos packet size in Domain Controllers 2019??

A ticket to the service cifs/CIFS-Server01 is issued for account ******@xyz.com. The size of the encrypted part of this ticket is 14583 bytes, which is close or greater than the configured ticket size threshold (12000 bytes). This ticket or any additional tickets issued from this ticket might result in authentication failures if the client or server application allocates SSPI token buffers bounded by a value that is close to the threshold value.

The size of ticket is largely determined by the size of authorization data it carries. The size of authorization data is determined by the groups the account is member of, the claims data the account is setup for, and the resource groups resolved in the resource domain.

Events id 31

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Windows for business | Windows Server | User experience | Other
0 comments No comments
{count} vote

1 answer

Sort by: Most helpful
  1. Mohd Arif 946 Reputation points
    2024-11-26T11:29:31.19+00:00

    Enabled SMB signing on storage side and all works well now.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.