| Previous | Next |
| STATUS_SMARTCARD_SILENT_CONTEXT | STATUS_ALL_USER_TRUST_QUOTA_EXCEEDED |
STATUS_PER_USER_TRUST_QUOTA_EXCEEDED
This user cannot create another delegated trust
Trust administration can impose both per-user and system-wide limits. This status specifically identifies the current user’s creation quota, so retrying under the same delegated identity will not help even if the directory is otherwise healthy.
Do not delete an arbitrary trust to make room. Inventory trusts created by the user, confirm whether they are active, and determine whether the task should be performed by a different authorized administrator or after an explicit quota change.
What to inspect
- Record the caller SID and the exact trust object being created.
- Enumerate existing trusts and their owners or audit history.
- Review delegated permissions and quota policy before escalating the operation.
References
- Microsoft: directory and trust error codes
- Microsoft Open Specifications: Netlogon Remote Protocol
- Samba: Active Directory trusts
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.