參考看看：
http://www.chicagotech.net/troubleshooting/event6035.htm

去 http://www.eventid.net 查看看event log的解決方法

看樣子是這個帳號隸屬於太多group之類的.., 請參考下列參考資料:

http://kb.prismmicrosys.com/evtpass/evtPages/EventId_6035_LsaSrv_49595.asp

http://support.microsoft.com/default.aspx?scid=kb;en-us;275266

http://download.microsoft.com/download/8/f/3/8f36dfe4-47d0-4775-ad5a-5614384921aa/AccessTokenLimitation.doc
微軟曾對此問題整理文件說明
he access token limitation is particularly problematic for domain controllers. A domain controller which has reached the access token limitation is no longer able to authenticate with other domain controllers, resulting in services such as replication no longer functioning.
If a replication failure on a domain controller occurs due to an access token limitation problem, errors such as the following appear in the Event Log:
• System
• Source: LSASRV
• EventID: 6035
• Message text:
During a logon attempt, the user’s security context accumulated too many security IDs. This is a very unusual situation. Remove the user from some global groups to reduce the number of security IDs to incorporate into the security context.
User's SID is S-1-5-18
If this is the Administrator account, logging on in safe mode will enable Administrator to log on by automatically restricting group memberships.
For Event 6035, you receive more than one of these System errors. You get multiple errors for the Domain Controllers group which is locked out and errors for the specific domain controller which had the access token limitation problem. In the message text above, the number in "User's SID is S-1-5-18" is a variable unique to each domain controller.