Resolution
fact
Domain Migration Administrator 7.x
symptom
Error: '[7075]S32022: Failed to change domain affiliation, hr=8007000e Insufficient memory for this operation'.
symptom
symptom
Error: 'The kerberos SSPI package generated an output token of size 4073 bytes, which was too large to fit in the 2EE0 buffer buffer provided by process id 0. If the condition persists, please contact your system administrator'.
cause
The buffer that stores the accounts group membership has overloaded.
fix
Remove the logon account from some of it's groups, or use a different administrative account that is not a member of as many groups.
note
Domain Migration Administrator 7.x
symptom
Error: '[7075]S32022: Failed to change domain affiliation, hr=8007000e Insufficient memory for this operation'.
symptom
Error: 'The kerberos SSPI package generated an output token of size 458F bytes, which was too large to fit in the 4073 buffer buffer provided by process id 0. If the condition persists, please contact your system administrator'.
symptom
Error: 'The kerberos SSPI package generated an output token of size 4073 bytes, which was too large to fit in the 2EE0 buffer buffer provided by process id 0. If the condition persists, please contact your system administrator'.
cause
The buffer that stores the accounts group membership has overloaded.
fix
Remove the logon account from some of it's groups, or use a different administrative account that is not a member of as many groups.
note
Please refer to the following Microsoft article for more information:
280830 - Kerberos Authentication May Not Work If User Is a Member of Many Groups
http://support.microsoft.com/default.aspx?scid=kb;en-us;280830&Product=win2000
Additional Information
Formerly known as NETIQKB37982