TokenSize = 1200 + 40d + 8s This formula uses the following values:
d: The number of domain local groups a user is a member of plus the number of universal groups outside the user's account domain plus the number of groups represented in security ID (SID) history.
s: The number of security global groups that a user is a member of plus the number of universal groups in a user's account domain.
1200: The estimated value for ticket overhead. This value can vary depending on factors such as DNS domain name length, client name, and other factors.