GPO processing aborted because their Kerberos information exceeded the maximum Kerberos token size.
#ADMT 3.2 WINDOWS#
Windows cannot determine the user or computer name. The Application eventlog contained the following event: If the condition persists, please contact your system administrator. The kerberos SSPI package generated an output token of size 3888 bytes, which was too large to fit in the 2e00 buffer buffer provided by process id 0. System eventlog (the number 3888 varied): After identifying several users experiencing similar issues, we noticed the following common eventlog entries: No problem so far, until we noticed some migrated users weren’t receiving Group Policy Objects and experienced authorization errors from time to time. Migrating the Active Directory user accounts is done using ADMT v3.1 with SIDHistory. In one of my earlier articles you can read I’m working on on a project where we’ll be performing a cross-forest migration of accounts and Exchange mailboxes. Ok, not directly Exchange related but an issue I’d like to share. PES 3.1 can be downloaded here (圆4) or here (x86).
#ADMT 3.2 UPDATE#
Be advised that this version of PES isn’t supported on Windows Server 2008 R2, so I expect an update for PES as well.
#ADMT 3.2 PASSWORD#
Note that ADMT uses Password Export Server (PES) which is currently still at version 3.1. The updated ADMT Guide: Migrating and Restructuring Active Directory Domains can be found here. As you can also see from the table below, the new ADMT version requires Windows Server 2003 domain functional level in both the source and the target domain: ADMT The new 3.2 version of ADMT only runs on Windows Server 2008 R2, but not on earlier versions.
With the release of R2 this lead to added complexity because projects needed to introduce a different OS in their environment. The previous version, ADMT 3.1, dates back to July, 2008 and is supported only on Windows Server 2008, but not R2. ADMT can be used to migrate and reorganize objects across in inter-forest (cross-forest) or intra-forest scenarios. At last, the Active Directory Migration Tool (ADMT) 3.2 was released to public.
0 kommentar(er)
