• State Suggested Answer
  • Locked Locked
  • Replies 10 replies
  • Answers 1 answer
  • Subscribers 32 subscribers
  • Views 8530 views
  • Users 0 members are here
Options
Related
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Accurate Token Bloat Report

adam.driver
over 6 years ago

Hi,

I see there is a Token Bloat report which is based upon the object being in 'X' number of groups. Would it be possible to have a report created that takes in to account the number of groups the object is in (Directly and indirectly) and also the type of groups they are in as these have different values. It would also need to take in to account if there is SID History tied to the object an the groups themselves. Another consideration is whether the account is also delegated for delegation as this impacts the Token size.

An MS engineer wrote a script which is pretty accurate, but we would ideally want that criteria reporting off of the Quest data already captured, but taking in to account the same considerations.

https://gallery.technet.microsoft.com/scriptcenter/Check-for-MaxTokenSize-520e51e5

Thanks,

Adam

Parents
  • 0 over 6 years ago
    The numbers i get are actually smaller than that of the script, by a few hundred or so - this would likely be the built in groups etc as you say. Is there a possibility that ER can be extended to capture TokenGroups?

    I would say the numbers are more accurate than the other Report available based on the group count for sure. Is there a field we can filter by to exclude distribution groups? GroupType maybe?

    Only other amendment i made was that the EstimatedTokenSize column didn't have an "As" statement on the Select statement, so wasn't showing in the CSV.

    Appreciate your help Peter.
Reply
  • 0 over 6 years ago
    The numbers i get are actually smaller than that of the script, by a few hundred or so - this would likely be the built in groups etc as you say. Is there a possibility that ER can be extended to capture TokenGroups?

    I would say the numbers are more accurate than the other Report available based on the group count for sure. Is there a field we can filter by to exclude distribution groups? GroupType maybe?

    Only other amendment i made was that the EstimatedTokenSize column didn't have an "As" statement on the Select statement, so wasn't showing in the CSV.

    Appreciate your help Peter.
Children
No Data