vCenter 5.1 AD group membership resolution

Hi,

I have problem with group membership resolution for users, that are members of high number of AD groups (about 500 local and global AD groups).

In our environment we grant VM users role to application admins.

Every VM has its own domain group, where are app admins placed and VM user role is granted. Users with membership in high number of AD groups see only part of their VMs in vSphere Client.

Users with less group membership see all their VMs.

Any idea?

Our environment:

vCenter Server 5.1 running on Windows 2k8 R2 server (member of AD)

ESXi 5.1 hosts and about 600 VMs

1 Active Directory,  MaxTokenSize set to maximum - 64k

Thank you