Warning for large Kerberos tickets This policy setting allows you to monitor tickets issued during Kerberos authentication whose size is close to or greater than a configured threshold value. The ticket size warnings are logged in the System log. If you enable this policy setting, you can set the threshold limit above which warnings will be reported. If set too high, then warnings related to authentication failures might be missed. If set too low, then you might see too many ticket warnings in the log to be useful for analysis. If you disable or do not configure this policy setting, the threshold value defaults to 12,000 bytes, which is the default Kerberos MaxTokenSize for Windows 7, Windows Server 2008 R2 and prior versions.

[enable/disable]

(1) GPO: Computer ConfigurationAdministrative TemplatesSystemKDC!Warning for large Kerberos tickets (2) REG: HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystemKDCParameters!EnableTicketSizeThreshold