When a user logs on to a computer, the Local Security Authority (LSA, a part of the Local Security Authority Subsystem) generates an access token.
The token represents the user's security context. The access token consists of unique security identifiers (SID) for every group that the user is
a member of. These SIDs include transitive groups and SID values from SID History of the user and the group accounts.
In this case the issue occurs when the logon user is an explicit or transitive member of too many security groups.
In the Windows event viewer the follow appears:
Security event log ID 4625 may display this error code:
0xc000015a