Windows error 8228 (ERROR_DS_ADMIN_LIMIT

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The LDAP operation exceeded an administrative limit enforced by the directory service.

Previous	Next
ERROR_DS_SIZELIMIT_EXCEEDED	ERROR_DS_COMPARE_FALSE

ERROR_DS_ADMIN_LIMIT_EXCEEDED

ERROR_DS_ADMIN_LIMIT_EXCEEDED (0x00002024) is an Active Directory Domain Services LDAP result. The LDAP operation exceeded an administrative limit enforced by the directory service.

Read the server’s LDAP policy and the operation’s size, time, page, and resource behavior before raising limits. Narrowing the query or using paging is usually safer than increasing a directory-wide administrative limit for one client.

What to check

Identify which operation limit was hit from the LDAP diagnostic data or Directory Service events.
Reduce search scope, paging size, requested attributes, or concurrent request volume.
Change LDAP policy only after measuring the workload and its impact on every domain controller.

Useful command

ntdsutil "LDAP policies" "connections" "connect to server <dc-fqdn>" quit "show values" quit

Microsoft: LDAP policy with Ntdsutil · Microsoft: AD DS limits · Microsoft: AD DS diagnostic logging

Looking for a different code? Search another status or error code.