This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Accurate Token Bloat Report

Hi,

I see there is a Token Bloat report which is based upon the object being in 'X' number of groups. Would it be possible to have a report created that takes in to account the number of groups the object is in (Directly and indirectly) and also the type of groups they are in as these have different values. It would also need to take in to account if there is SID History tied to the object an the groups themselves. Another consideration is whether the account is also delegated for delegation as this impacts the Token size.

An MS engineer wrote a script which is pretty accurate, but we would ideally want that criteria reporting off of the Quest data already captured, but taking in to account the same considerations.

https://gallery.technet.microsoft.com/scriptcenter/Check-for-MaxTokenSize-520e51e5

Thanks,

Adam

Parents

0 adam.driver over 6 years ago

Hi Peter,

Thank you, That filtered out the Distribution groups and has shrunk the estimated token size. It is off still slightly, but i am guessing this is built in groups etc as you have said.

If the Token Groups is something you can potentially have raised as a feature request in a later release, that would be handy.

Thank you very much for the report.

Adam
Cancel
Up 0 Down

Cancel

Reply

0 adam.driver over 6 years ago

Hi Peter,

Thank you, That filtered out the Distribution groups and has shrunk the estimated token size. It is off still slightly, but i am guessing this is built in groups etc as you have said.

If the Token Groups is something you can potentially have raised as a feature request in a later release, that would be handy.

Thank you very much for the report.

Adam
Cancel
Up 0 Down

Cancel

Children

No Data