Nov/090
Microsoft Kerberos Awesomeness!
So anybody that has worked on a large domain has probably run into this issue before.
When joining a machine to a windows domain, there is the possibility that the following error can occur:
Not enough storage is available to complete this operation.
Now now...I know what you may be thinking. "I have a 500Gb hard drive, what the hell is this talking about?" Unfortunately, it is not referring to the space on your machine, or the space on the server for that matter. This error message is referring to the amount of tokens or "group memberships" exceeds the default max bytes of data to be included in a kerberos packet. This size can vary depending on the operating system, but there is a way to fix this problem. Adding the following registry key will force the maximum size of the data to be set very large so we don't have this problem.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters]
"MaxTokenSize"=dword:0000ffff
In decimal, that value is 65,535 if you would like to do it that way. Once you set this value, restart your machine and you should be all set. No more errors.