| Previous | Next |
| ERROR_DS_ILLEGAL_MOD_OPERATION | ERROR_DS_BAD_INSTANCE_TYPE |
ERROR_DS_OBJ_TOO_LARGE
Object growth exceeded a directory operation limit
This code should be investigated at the object and attribute level. Active Directory entries can accumulate large multivalued attributes, references, or application-specific data. An operation that expands such an entry can fail even though the DN is valid and each new value satisfies the attribute syntax. The failure concerns the resulting object size or processing representation.
Compare the object before and after the proposed change. Large groups, ACL-heavy objects, and application objects with many values require different remediation, so deleting arbitrary attributes is unsafe. Also distinguish this status from a network response-size problem: LDAP range retrieval and paged searches address result sets, whereas this code refers to the directory object involved in the update.
What to inspect
- Measure attribute value counts and approximate payload size on the target entry.
- Identify the specific modification that crosses the limit.
- Do not use LDAP paging as a fix for an oversized object update.
References
- MS-ADTS: constraints on Active Directory Modify operations
- MS-ADTS: object references and referential integrity
- IETF RFC 4511: LDAP protocol operations and result semantics
Looking for a different code? Search another status or error code.