The request was denied because there was a failure during Active Directory Domain Services group expansion. No tokens were ...