| Previous | Next |
| ERROR_INVALID_ID_AUTHORITY | ERROR_INVALID_GROUP_ATTRIBUTES |
ERROR_ALLOTTED_SPACE_EXCEEDED
A security descriptor or ACL update needs more allotted space
Despite the wording about memory, this status can describe capacity in a security-information structure rather than overall system RAM. AddAccessAllowedAce, for example, returns ERROR_ALLOTTED_SPACE_EXCEEDED when the new ACE will not fit in the ACL buffer. Account provisioning code often constructs DACLs or updates token/security information alongside SAM operations, so the failing security-update call matters.
Measure the ACL or descriptor being modified and recalculate the required buffer size from the existing entries plus the new ACE. Do not respond by increasing the page file or treating the code as a generic out-of-memory event until the exact API is known. Also validate ACL revision and canonical construction separately; a larger buffer does not repair a malformed security descriptor.
What to inspect
- Identify the exact security-information API that returned 1344.
- For ACL updates, compute space for all existing ACEs plus the new entry and structure overhead.
- Keep buffer-capacity failures separate from invalid ACL or SID failures.
References
Looking for a different code? Search another status or error code.