Access is denied

Access is denied

You might se the error Access is denied when some users start a published application or desktop from XenApp.


This issue can be seen on users who are member of an extended number of groups, there is not a specific number because it depends on the current number of users on the XenApp server.

You could lower the number of groups the users is a member of, or as a workaround you can increase the Kerboros MaxTokenSize.

On your XenApp server(s) create a dword value under HKLMSystemCurrentControlSetControlLsaKerberosParameters and set the value 48000 (Decimal).


The servers must be restarted before the change will work.

Table of Contents

Share this post
Search blog posts
Modern Workplace consultant and a Microsoft MVP in Enterprise Mobility.
Modern Workplace consultant and a Microsoft MVP in Windows and Devices for IT.

Infrastructure architect with focus on Modern Workplace and Microsoft 365 security.

Cloud & security specialist with focus on Microsoft backend products and cloud technologies.

Cloud & Security Specialist, with a passion for all things Cybersecurity

Cloud and infrastructure security specialist with background in networking.

Infrastructure architect with focus on design, implementation, migration and consolidation.

Infrastructure consultant with focus on cloud solutions in Office365 and Azure.

follow us in feedly

Follow on SoMe