| Previous | Next |
| ERROR_INTERNAL_DB_ERROR | ERROR_LOGON_TYPE_NOT_GRANTED |
ERROR_TOO_MANY_CONTEXT_IDS
The user security context accumulated too many SIDs during logon
An access token contains the user SID and group SIDs used for access checks, and authentication validation can return group membership information used to build that token. This error occurs during logon when the expanded security context contains too many security identifiers. It is a token/group-expansion limit, not a count of concurrent sessions or a shortage of LUID values.
Inspect direct and nested group membership, SIDHistory, and domain-local/resource group expansion applicable to the logon. Capture the user token on a comparable successful path and count group/restricted SID entries. In large Active Directory environments, reduce unnecessary nesting and stale migration SIDs instead of increasing unrelated resource limits. Also correlate with Kerberos token-size or HTTP header symptoms only as secondary effects; this error itself reports the security-context construction failure before normal access checks can use the token.
What to inspect
- Enumerate direct, nested, resource-group, and SIDHistory contributions to the token.
- Compare TokenGroups count with a similar account that logs on successfully.
- Reduce unnecessary group expansion rather than troubleshooting LUID or session counts.
References
Looking for a different code? Search another status or error code.