Not enough storage is available to complete this operation.

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\Parameters

add the following registry value:

Value name: MaxTokenSize
Data type: REG_DWORD
Radix: Decimal
Value data: 65535

much thanks to kris linquist for digging this gem up.