What does Windows error code 8228 (ERROR_DS_ADMIN_LIMIT_EXCEEDED) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The LDAP operation exceeded an administrative limit enforced by the directory service.

Previous	Next
ERROR_DS_SIZELIMIT_EXCEEDED	ERROR_DS_COMPARE_FALSE

ERROR_DS_ADMIN_LIMIT_EXCEEDED

ERROR_DS_ADMIN_LIMIT_EXCEEDED (0x00002024) is an Active Directory Domain Services LDAP result. The LDAP operation exceeded an administrative limit enforced by the directory service.

What to check

Identify which operation limit was hit from the LDAP diagnostic data or Directory Service events.
Reduce search scope, paging size, requested attributes, or concurrent request volume.
Change LDAP policy only after measuring the workload and its impact on every domain controller.

Useful command

ntdsutil "LDAP policies" "connections" "connect to server <dc-fqdn>" quit "show values" quit

Microsoft: LDAP policy with Ntdsutil · Microsoft: AD DS limits · Microsoft: AD DS diagnostic logging

Looking for a different code? Search another status or error code.