0

I had the user log into multiple machines on different domains, both virtual and physical, and the issue persists. When I log into those same machines I get to the sites without issue. I checked the users group membership in AD and he has all of our baseline groups plus the ones he needs for his job... No other users are reporting this issue.

1
  • Can you provide some more information about what the names resolve to, whether you're using a proxy, or anything else that might help troubleshoot the issue?
    – Sam Martin
    Apr 11, 2019 at 20:20

1 Answer 1

0

I found the issue. It was Token Bloat. The user was in 325 groups in Active Directory and his token was over 12,000k causing a Kerberos error. Removed unneeded AD groups to fix.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .