I am trying to get a Remote desktop server running. It mostly works but some user get a access denied while logging in. It attempts to begin the log in but the access denied is displayed within the remote desktop.
The remote desktop server has the following message in the event logs.
"The kerberos SSPI package generated an output token of size 12090 bytes, which was too large to fit in the token buffer of size 12000 bytes, provided by process id 4.
The application needs to be fixed to supply a token buffer of size at least 48000 bytes."
I have tried setting the on each server, a value of the MaxTokenSize in
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\Parameters
to have a value of 48000, but I still get the error. I have also done a GPO and set it on everything including.
Domain controllers
Remote desktop server
Windows...