Maximum AD groups that can be assigned to a domain user

Copper Contributor

HI,

Do we have an upper limit as to the number of AD groups that can be assigned to a domain user?. Does it differ for a windows 7 domain from windows 10 domain? 

1 Reply

@swamis Based on that article, a security token of a Windows client can hold up to 1024 SIDs. AFAIK you should not put a single user in more than 1,000 groups. AD Migration: Maximum number of group memberships - Active Directory FAQ. The limit should remain the same for W7 and W10 clients.