Adjust Distributed Cache and STS

https://www.habaneroconsulting.com/stories/insights/2013/sharepoint-2013-distributed-cache-bug#.VC7331fdb3U

https://blogs.msdn.microsoft.com/sambetts/2015/10/20/why-sharepoint-check-permissions-can-give-wrong-results-for-ad-groups/

Modified sts external token instead of 1 day to 2 hours

$cs = [Microsoft.SharePoint.Administration.SPWebService]::ContentService

$cs.TokenTimeout = New-TimeSpan -Hours 2

$cs.Update()

Added    <appSettings><add key="backgroundGC" value="true"/></appSettings> in the distributed

DistributedCacheService.exe.config

Then I will need to set the following:

Get-SPDistributedCacheClientSetting -ContainerType DistributedLogonTokenCache

$DLTC = Get-SPDistributedCacheClientSetting -ContainerType DistributedLogonTokenCache

$DLTC.maxBufferPoolSize = "1073741824"

$DLTC.maxBufferSize = "33554432"

$DLTC.requestTimeout = "3000"

$DLTC.channelOpenTimeOut = "3000"

$DLTC.MaxConnectionsToServer = "100"

Set-SPDistributedCacheClientSetting -ContainerType DistributedLogonTokenCache $DLTC

Restart-Service -Name AppFabricCachingService

$sts = Get-SPSecurityTokenServiceConfig

$sts.MaxServiceTokenCacheItems = "1500"

$sts.MaxLogonTokenCacheItems = "1500"

$sts.Update()

Restart AppFabric Windows Service on all cache servers

Restart-Service -Name AppFabricCachingService

Restart Distributed Cache SharePoint service on all cache servers( from central admin)

 Reset IIS  (important to make)