MaxTokenSize and Windows 8 and Windows Server 2012

re: MaxTokenSize and Windows 8 and Windows Server 2012

MikeStephensMSFT — Fri, 21 Sep 2012 13:49:44 GMT

Hi Christian, I had to run this down because I lost it in my notes. Resource SID compression algorithms go back to Windows 2000. However, Windows Server 2012 is the first KDC that will actually issue a ticket with resource SID compression enabled. Great Question -Mike Stephens

re: MaxTokenSize and Windows 8 and Windows Server 2012

Christian Schindler — Wed, 19 Sep 2012 09:46:38 GMT

Great writeup! Do older clients(e.g. Win7/Vista/XP) know how to handle the resource SID compression? Thanks Christian

re: MaxTokenSize and Windows 8 and Windows Server 2012

JoeVanH — Mon, 17 Sep 2012 19:01:38 GMT

Very glad this has finally been addressed. Thank you for sharing this information!

re: MaxTokenSize and Windows 8 and Windows Server 2012

MikeStephensMSFT — Thu, 13 Sep 2012 14:02:26 GMT

KDC should not require a reboot for these policy settings.

re: MaxTokenSize and Windows 8 and Windows Server 2012

Ing. Ondrej Žilinec — Wed, 12 Sep 2012 20:39:47 GMT

This is really cool thing. It's sad there is not path to make this also available for older Windows :)

re: MaxTokenSize and Windows 8 and Windows Server 2012

Miroslav Reisinger — Wed, 12 Sep 2012 19:25:38 GMT

Nice improvements. Is reboot or just KDC service restart (without taking the DC off completely) needed after disabling the Resource SID compression in the registry?