| Previous | Next |
| ERROR_DS_UNAVAILABLE | ERROR_DS_NO_MORE_RIDS |
ERROR_DS_NO_RIDS_ALLOCATED
The local DC could not obtain a relative identifier for SID creation
A user, computer, or security group SID combines the domain SID with a RID that must be unique in that domain. Domain controllers do not contact the RID master for every account creation; each DC receives a local RID pool and allocates from it until the pool becomes low enough to request another block.
This status should be investigated as RID-pool state, replication, or RID-master reachability rather than as a naming conflict. Check Directory Services and Directory-Services-SAM events for pool invalidation or allocation failures. Confirm the RID master is healthy and that its domain naming context has replicated since startup, because the RID FSMO role is not considered active until its required initial replication has occurred.
What to inspect
- Identify the current RID master and verify inbound replication for the domain NC.
- Review RID-related events 16650 and the 1665x series on the failing DC.
- Confirm the DC has not restored or rolled back in a way that invalidated its local RID pool.
References
- Microsoft: managing RID issuance
- Microsoft: RID allocator initialization failures
- Microsoft: Active Directory FSMO roles
Looking for a different code? Search another status or error code.