Error message: During a logon attempt, the user's security context accumulated too many security IDs
Cause This behavior occurs because Windows systems contain a limit that prevents a user's security access token from containing more than 1,000 security identifiers (SIDs). This means that when a user is being validated for access rights to establish a new session with a server, that user must not be a member of more than 1,000 groups in that server's domain. If this limit is exceeded, access to the server is denied, and the error code 1384 is returned to the user.
The big question: how can I make the "1000" a little bit bigger, like "2000"? On Active directory side.