NTSTATUS 0xC0000403 (STATUS_USER_DELETE_TRUST_QUOTA

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The caller has exhausted its delegated allowance for removing domain trusts.

Previous	Next
STATUS_ALL_USER_TRUST_QUOTA_EXCEEDED	STATUS_DS_NAME_NOT_UNIQUE

STATUS_USER_DELETE_TRUST_QUOTA_EXCEEDED

The delegated identity cannot remove another trusted-domain object

Removing a trust deletes or changes trusted-domain state held by the local security authority. That state can include the partner SID, trust direction, authentication material, and name-routing information. This result says the deletion allowance assigned to the caller has been consumed; it does not mean that the partner domain is unreachable.

First establish whether the operation removed one side, both sides, or neither side. A partially dismantled relationship can leave a trusted-domain object on one domain while the other side no longer has matching credentials. Use supported trust-management operations and allow directory replication to converge before judging the final state.

What to inspect

Record the policy handle owner, target domain SID, trust direction, and local domain.
Enumerate trusted-domain objects after replication and compare the partner’s configuration separately.
Review trust-change audit event 4716 and use an appropriately authorized account for any corrective removal.

References

Looking for a different code? Search another status or error code.