Very good article found here: http://blogs.technet.com/b/askds/archive/2007/11/02/what-s-in-a-token.aspx