What does Windows error code 8227 (ERROR_DS_SIZELIMIT_EXCEEDED) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The LDAP server reached its result-size limit before returning all matching objects.

Previous	Next
ERROR_DS_TIMELIMIT_EXCEEDED	ERROR_DS_ADMIN_LIMIT_EXCEEDED

ERROR_DS_SIZELIMIT_EXCEEDED

ERROR_DS_SIZELIMIT_EXCEEDED (0x00002023) is an Active Directory Domain Services LDAP result. The LDAP server reached its result-size limit before returning all matching objects.

What to check

Treat the response as incomplete; do not assume that an absent object is not in the directory.
Use a narrower filter or LDAP paging in the application instead of a single broad query.
Review the configured LDAP policy before considering a server-side limit change.

Useful command

Get-ADObject -LDAPFilter "(objectClass=*)" -SearchBase "OU=<OU>,DC=<domain>,DC=<tld>"

Microsoft: LDAP policy with Ntdsutil · Microsoft: AD DS limits · Microsoft: AD DS LDAP operations

Looking for a different code? Search another status or error code.