Liens utiles sur les jetons de sécurité

datacenter

Comment fonctionnent les tokens ? Ressources utiles

  • 1er point Groupes nested group

https://blogs.technet.microsoft.com/askds/2012/09/12/maxtokensize-and-windows-8-and-windows-server-2012/

https://support.microsoft.com/fr-fr/help/938118/how-to-use-group-policy-to-add-the-maxtokensize-registry-entry-to-multiple-computers

  • Qu’est ce qu’un token ?

https://blogs.technet.microsoft.com/askds/2007/11/02/whats-in-a-token/

  • Script de test si problème ou non

https://gallery.technet.microsoft.com/scriptcenter/Check-for-MaxTokenSize-520e51e5

  • Jetons d’accès

https://technet.microsoft.com/fr-fr/library/dn169025(v=ws.10).aspx

Access Tokens Technical Reference.

https://technet.microsoft.com/fr-fr/library/cc779140(v=ws.10).aspx

  • Comptes des groupes

http://www.jhouseconsulting.com/2013/12/20/script-to-create-a-kerberos-token-size-report-1041

  • Microsoft KB327825 Problems with Kerberos authentication when a user belongs to many groups

http://support.microsoft.com/kb/327825

  • Microsoft KB243330: Well-known security identifiers in Windows operating systems

http://support.microsoft.com/kb/243330

  • Microsoft KB328889: Users who are members of more than 1,015 groups may fail logon authentication

http://support.microsoft.com/kb/328889

  • Microsoft KB938118: How to use Group Policy to add the MaxTokenSize registry entry to multiple computers

http://support.microsoft.com/kb/938118

  • Microsoft Blog: Managing Token Bloat

http://blogs.dirteam.com/blogs/sanderberkouwer/archive/2013/05/22/common-challenges-when-managing-active-directory-domain-services-part-2-unnecessary-complexity-and-token-bloat.aspx

  • You also need to understand how the token is managed in 4KB blocks. It starts to make sense when you tie together the comments from Paul Bergson, Richard Mueller and Marcin Polich

https://social.technet.microsoft.com/Forums/windowsserver/en-US/a7035740-355f-4a8c-a434-27583e3b6075/probably-a-maxtokensize-problem-but?forum=winserverDS

  • There is some further good information on SIDs

http://www.selfadsi.org/deep-inside/microsoft-sid-attributes.htm

 

voir les autres articles sur le même sujets.

logo2 itconsult

Laisser un commentaire