What does Windows error code 8227 (ERROR_DS_SIZELIMIT_EXCEEDED) mean?

 
Previous Next
ERROR_DS_TIMELIMIT_EXCEEDED ERROR_DS_ADMIN_LIMIT_EXCEEDED

ERROR_DS_SIZELIMIT_EXCEEDED

ERROR_DS_SIZELIMIT_EXCEEDED (0x00002023) is an Active Directory Domain Services LDAP result. The LDAP server reached its result-size limit before returning all matching objects.

What to check

  • Treat the response as incomplete; do not assume that an absent object is not in the directory.
  • Use a narrower filter or LDAP paging in the application instead of a single broad query.
  • Review the configured LDAP policy before considering a server-side limit change.

Useful command

Get-ADObject -LDAPFilter "(objectClass=*)" -SearchBase "OU=<OU>,DC=<domain>,DC=<tld>"

Microsoft: LDAP policy with Ntdsutil · Microsoft: AD DS limits · Microsoft: AD DS LDAP operations


Looking for a different code? Search another status or error code.