How can I increase the kerberos packet size on Domain Controllers

Mohd Arif 926 Reputation points
2023-10-25T11:06:39.1466667+00:00

We have CIFS server where we have created shared folders. When users access it, some times it works fine and some times give error "Access Denied". I found below events in my DC. Please may I know what is the issue? How can I increase the kerberos packet size in Domain Controllers 2019??

A ticket to the service cifs/CIFS-Server01 is issued for account user1@xyz.com. The size of the encrypted part of this ticket is 14583 bytes, which is close or greater than the configured ticket size threshold (12000 bytes). This ticket or any additional tickets issued from this ticket might result in authentication failures if the client or server application allocates SSPI token buffers bounded by a value that is close to the threshold value.

The size of ticket is largely determined by the size of authorization data it carries. The size of authorization data is determined by the groups the account is member of, the claims data the account is setup for, and the resource groups resolved in the resource domain.

Events id 31

Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,537 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,055 questions
0 comments No comments
{count} vote