What does Windows error code 8227 (ERROR_DS_SIZELIMIT_EXCEEDED) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The LDAP server reached its result-size limit before returning all matching objects.

Previous	Next
ERROR_DS_TIMELIMIT_EXCEEDED	ERROR_DS_ADMIN_LIMIT_EXCEEDED

ERROR_DS_SIZELIMIT_EXCEEDED

ERROR_DS_SIZELIMIT_EXCEEDED (0x00002023) is an Active Directory Domain Services LDAP result. The LDAP server reached its result-size limit before returning all matching objects.

Use LDAP paging and narrower filters when all matching objects are required, and request only needed attributes. If the server policy limit is intentional, redesign the client query instead of relying on a larger one-shot result.

What to check

Treat the response as incomplete; do not assume that an absent object is not in the directory.
Use a narrower filter or LDAP paging in the application instead of a single broad query.
Review the configured LDAP policy before considering a server-side limit change.

Useful command

Get-ADObject -LDAPFilter "(objectClass=*)" -SearchBase "OU=<OU>,DC=<domain>,DC=<tld>"

Microsoft: LDAP policy with Ntdsutil · Microsoft: AD DS limits · Microsoft: AD DS LDAP operations

Looking for a different code? Search another status or error code.