The token buffer size during authentication was constructed from the wrong buffer size. These sizes are equal in case of local account logins but differ with domain accounts.