Problem with too "fat" security token in Windows 20002003 AD infrasructure is known from long time. In basic words – security token is access token generated for each user during the logon process. In the process of building this token all SIDs for security groups user belongs too are added to this token. But hey … Continue reading "Access token limitation document and tool"