| Previous | Next |
| STATUS_DS_NO_FPO_IN_UNIVERSAL_GROUPS | STATUS_MULTIPLE_FAULT_VIOLATION |
STATUS_DS_MACHINE_ACCOUNT_QUOTA_EXCEEDED
The machine-account creation quota was exceeded
By default, a non-administrative user can be allowed to join a limited number of computers to a domain. This status means the quota for creating computer accounts has been exceeded for that caller or policy path.
Do not assume the domain join failed because of DNS or credentials. The account may authenticate successfully and then be blocked specifically at the computer-account creation step.
What to inspect
- Check the domain
ms-DS-MachineAccountQuotapolicy and the caller identity. - Look for stale or pre-created computer accounts that should be reused instead of creating new ones.
- Use delegated join rights or pre-staged accounts rather than raising the quota globally without review.
References
- Microsoft: default workstation join limit
- Microsoft: Active Directory security groups
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.