Article ID: 2812409 - View products that this article applies to.
You receive an email message from MSOnlineServicesTeam@MicrosoftOnline.com that contains the following error message:
Note This article can also be used if you just want to request to increase the directory service quota in case you're planning to have more than the allowed number of objects in a Microsoft cloud service such as Office 365, Azure, or Microsoft Intune, and you don't use Active Directory synchronization. The current directory service quota in Azure Active Directory (Azure AD) is 50,000 objects.
Error 016: Synchronization has been stopped. This company has exceeded the number of objects that can be synchronized. Contact Microsoft Online Services Support.
This issue occurs because the number of objects that you created in your Azure AD exceed your directory service limit. Azure AD limits how many objects can be created by each organization. Groups, contacts, and user objects in your Azure AD organization are counted as part of your organization's directory usage.
Your default directory service quota is calculated according to the following guidelines:
When the number of groups, contacts, and user objects in your on-premises Active Directory exceed your directory service quota, you can request an increase to the directory service quota limitation for your company. This increase lets you sync more objects than the current default limit when you use directory synchronization.
To continue to create objects in your organization, you must either add a domain or request an increase to your directory service quota. To do this, use the following methods.
Method 1: If you don't have a verified domainYou must add a domain to increase your quota limit to 300,000 objects. For more information, go to the following Microsoft website:
Add your domain
Method 2: If you have more than 300,000 objects in your on-premises Active Directory directory serviceTo increase the number of objects that can be synced beyond 300,000, contact Support.
A directory service quota is implemented by using the cloud service as a method to limit the maximum number of objects that can be created and owned by a single security principal. All objects that are synced by using directory synchronization to a company have the creator/owner value set to the default admins group for that company. For example, the admins group is set as follows:
email@example.comTherefore, this configuration prevents users from creating an unlimited number of objects by using directory synchronization. If a company has a legitimate need to sync more than the directory service quota limit, submit a service request to technical support.
Frequently asked questionsQ1. Do objects that were manually added through the cloud service portal or through the cloud service API, such as Exchange Online PowerShell, count against my online company quota?
Q2. Do deleted objects count against my online company quota?
A2. Yes. When a cloud service customer deletes an object from an online company, the deleted object is put into a deleted objects container in the directory service. The object remains in the deleted objects container until the tombstone lifetime expires. The expiration is currently set to 30 days.
For example, consider the following scenario. An online company is evaluating a cloud service by using a nonproduction on-premises Active Directory environment. The cloud service organization was created before October 5, 2011, and the default sync limit is 10,000 objects. The company performs a bulk sync of 8,000 group objects and contact objects by using the Directory Sync tool. Later, the online company decides to do the following:
In this scenario, the online company that's performing the evaluation of the cloud service must reduce the number of objects in its nonproduction on-premises Active Directory DS environment to complete the product evaluation. However, if the online company can't reduce the number of objects, the company must request an increase in its directory service quota.
Q3. Does having more than one verified domain mean that I can have a quota that's higher than 300,000 objects?
A3. No. You're granted a directory quota of 300,000 objects if you have one or more verified domains. You're not granted a quota of 300,000 objects for each verified domain that you register.
Still need help? Go to the Office 365 Community
(http://community.office365.com/)website or the Azure Active Directory Forums
Article ID: 2812409 - Last Review: January 12, 2015 - Revision: 23.0