Overview#MAXIMUM_LOGINS_EXCEEDED is when an attempt was made to log in using an account that has limits on the number of concurrent connections. Microsoft Active Directory has no built-in limitation the number of connections from a single DUA
Microsoft Active Directory limits the total number of connections to a DSA (ie Domain Controller) which are specified in cn=Query-Policies,cn=Directory Service,cn=Windows NT,cn=Services of the configuration root. The property for concurrent connections is MaxConnections.
When we observed the limit is per Domain Controller is set to 5000.
- -217 FFFFFF27
- Source: eDirectory or NDS operating system
- Explanation: An attempt was made to log in using an account that has limits on the number of concurrent connections (loginMaximumSimultaneous), and that number has been reached.
- Possible Cause: The object might have restrictions set for logging in to the server.
- Action: If appropriate, change or delete the restriction.