What does NTSTATUS 0xC0000099 (STATUS_ALLOTTED_SPACE_EXCEEDED) mean?

 
Previous Next
STATUS_FILE_INVALID STATUS_INSUFFICIENT_RESOURCES

STATUS_ALLOTTED_SPACE_EXCEEDED

The security object cannot grow inside its allotted buffer

Access tokens and related security objects reserve dynamic storage for information such as the default discretionary ACL and primary group. TOKEN_STATISTICS exposes both the charged and currently available dynamic space. This status can occur when an update would exceed that reservation while existing handles still reference the object.

This is not a general out-of-memory result. Retrying the same in-place update will not enlarge the existing object. Create a new token or security descriptor with the required contents, then replace the reference through the supported API rather than modifying undocumented memory.

What to inspect

  • Record TOKEN_STATISTICS.DynamicCharged and DynamicAvailable when token data is involved.
  • Measure the complete ACL or group structure after canonical serialization.
  • Use token duplication or a newly allocated self-relative security descriptor instead of patching the existing buffer.

References


Looking for a different code? Search another status or error code.