Addressing Problems Due to Access Token Limitation
Brief Description
It is possible for Windows Server 2003 and Windows 2000 Server environments that contain complex group structures to have problems with an access token limitation during authentication. This document describes this limitation and provides information to help you solve resulting problems.
*Download size depends on selected download components.
Overview
Windows Server 2003 and Windows 2000 Server environments that contain complex group structures can encounter problems with an access token limitation during authentication. This document describes this limitation and provides information to help you do the following:
• Identify the symptoms of an access token limitation problem.
• Use the new Group Membership Evaluation functionality provided in the Ntdsutil.exe tool, to generate a report.
• Analyze the results of the Group Membership Evaluation report to identify the source of the problem.
• Recover from an access token limitation problem.
• Implement best practices to help avoid access token limitation problems.
Supported Operating Systems: Windows 2000; Windows 2000 Advanced Server; Windows 2000 Professional Edition ; Windows 2000 Server; Windows 2000 Service Pack 2; Windows 2000 Service Pack 3; Windows 2000 Service Pack 4; Windows Server 2003; Windows Server 2003 Service Pack 1; Windows Server 2003 Service Pack 1 for Itanium-based Systems; Windows Server 2003, Datacenter Edition for 64-Bit Itanium-Based Systems; Windows Server 2003, Datacenter x64 Edition; Windows Server 2003, Enterprise Edition for Itanium-based Systems; Windows Server 2003, Enterprise x64 Edition; Windows Server 2003, Standard x64 Edition; Windows Small Business Server 2003
