adixro I do not have much to share, though. Back in August, we had a few comments on the blog (and I have seen some on other forums) where some of our customers said that disabling IIS Token Cache would create a noticeable delay for their client logons. Then, most of those comments stopped. Our hypothesis was that yes, this can happen during the first logon (because app pools get restarted), but then it should not really be noticeable. I also heard that some customers were not disabling Token Cache because of such concerns. We never got any specific support tickets on this (that I'm aware of). The bottom line is - if someone was concerned with IIS Token Cache perf impact - now there is a way to not disable it and address the vulnerabilities (or re-enable it after updating Windows).