I have recently upgrade our Active Directory level to Windows 2012.
today in events of only one dc i see this error for my user:

Active Directory Domain Services could not update the following object
with attribute changes because the incoming change caused the object to
exceed the maximum object record size. The incoming change to the
following attribute will be reversed in an attempt to complete the

48230001 (protocom-SSO-Entries)

The current value (without changes) of the attribute on the local
directory partition will replicate to all other directory services. This
will counteract the change to the rest of the directory services. The
reversal values may be recognized as follows:

the solution is delete some entries or if i re-extend adschema ?

thanks fo any advance.

Sorato's Profile: https://forums.netiq.com/member.php?userid=5470
View this thread: https://forums.netiq.com/showthread.php?t=51714