"400 Bad Request" when attempting to log into the Web Interface (192835)

Return

Feedback submitted.

Was this article helpful?

[Select Rating]

Title

"400 Bad Request" when attempting to log into the Web Interface
Description

HTTP error "400 Bad Request" is encountered when attempting to log into the Web Interface when Windows Authentication is enabled.
When Windows Authentication is disabled and Basic Authentication is enabled, logins are successful.
Cause

A large number of Active Directory Group memberships has increased the User's Kerberos token size beyond what the default settings will allow.
Resolution

Follow the steps outlined in this TechNet solution.
A reboot of the IIS host machine is required in order for these configuration changes to come into effect.
Additional Information

This issue can be confirmed by checking the IIS logs located at C:\Windows\System32\LogFiles\HTTPERR The logs will show "HTTP 400 - Bad Request (Request Header too long)" A network capture will also show a similar message.