What does NTSTATUS 0xC00002E7 (STATUS_DS_MACHINE_ACCOUNT_QUOTA_EXCEEDED) mean?

STATUS_DS_MACHINE_ACCOUNT_QUOTA_EXCEEDED

The machine-account creation quota was exceeded

By default, a non-administrative user can be allowed to join a limited number of computers to a domain. This status means the quota for creating computer accounts has been exceeded for that caller or policy path.

Do not assume the domain join failed because of DNS or credentials. The account may authenticate successfully and then be blocked specifically at the computer-account creation step.

What to inspect

• Check the domain ms-DS-MachineAccountQuota policy and the caller identity.
• Look for stale or pre-created computer accounts that should be reused instead of creating new ones.
• Use delegated join rights or pre-staged accounts rather than raising the quota globally without review.

References

• Microsoft: default workstation join limit
• Microsoft: Active Directory security groups
• Microsoft Open Specifications: NTSTATUS values