Microsoft's official enterprise support blog for AD DS and more
Wait, don't leave!!!
We get a lot of hits thanks to Live and Google searches sending people our way when they search on this error. We highly recommend you follow this link to find all the various causes of this error (it uses the site:microsoft.com option to narrow your results and the exact error verbiage) :
Return all exact Microsoft site articles on this error via Live Search
Ok, back to our blog post:
Last week I had a customer that was witnessing the following error each time he attempted to manage his Active Directory environment - including attempting to simply add a domain account to his local client machines Administrators group.
"Not enough storage is available to complete this operation."
He had confirmed that he was receiving this same pop-up error message on each and every one of his 2003 SP1 Domain Controllers.
I began troubleshooting this issue as an unresponsive/out-of-resources type of issue in reference to the 'not enough storage' part of the error message. In doing such, I requested and retrieved both 'NetStat -anb' (http://support.microsoft.com/default.aspx?scid=kb;EN-US;137984) and Server Performance Advisor (SPA) output.
Note: If you're not familiar with the SPA tool, the following blog site for 'A Day at the SPA' is helpful - http://blogs.technet.com/ad/
Upon reviewing the information gathered by these tools, it was apparent to me that the error being returned made this not necessarily an unresponsive/out-of-resources type of issue as first suspected. Specifically, when I reviewed the SPA data and Netstat output it was evident that there was not a resource or bottleneck problem at hand when the issue occurs.
However, the only reference to the error returned with a search of the KnowledgeBase, included an issue w/ MaxTokenSize - 935744 (http://support.microsoft.com/default.aspx?scid=kb;EN-US;935744). So that wasn’t quite it either.
I then located article 913003 - "The Offer Remote Assistance HelpersCNF group is created on domain controllers that have the SMS 2003 Advanced Client installed and that have the Remote Control Agent service enabled" (http://support.microsoft.com/default.aspx?scid=kb;EN-US;913003).
After reviewing this I then confirmed with my customer that they had just recently upgraded their version of Microsoft Systems Management Server (SMS) 2003 Advanced Client and had the Remote Control Agent service enabled (as the article details). Accessing the Users container within the Active Directory Users and Computers snap-in, we had several (322 actually) 'Offer Remote Assistance HelpersCNF' domain groups.
Upon following through with the article in disabling both the 'Solicited Remote Assistance' and 'Offer Remote Assistance' settings within the Default Domain Controllers Group Policy, we deleted all of the CNF objects. Once deleted and the deletion replicated around to the other Domain Controllers, we were no longer witnessing the - "Not enough storage is available to complete this operation" error.
Problem solved: our customer could now add a domain account to his local client machines Administrators group.
Even I witnessed the issue while I was trying to access DFS Snap-ins. Tried to load a DFS root and it would give "Not enough storage is available to complete this operation".
It was only occuring for one of our 5 domains. We observed the issue and we found out that the user logging in the problem domain had group policy errors. 1053 with same error "Not enough storage is available to complete this operation".
This was related to user specific group policies. Computer was fine. This triggered my mind to look at the user's token size. Changed the token size limit to 65365 and it worked. We were able to apply the user specific group policies and so the DFS snapins were accessible.
Though of sharing one of the scenarios. These errors come in all sizes and in different ways.
We’ve been at this for over a year (since August 2007), with more than 100 posts (127 to be exact), so