| Previous | Next |
| STATUS_NOINTERFACE | STATUS_DS_ADMIN_LIMIT_EXCEEDED |
STATUS_DS_RIDMGR_DISABLED
RID allocation is disabled for protection
This status is intentionally protective. It indicates that the directory service detected a condition serious enough to stop relative identifier allocation instead of continuing to create security principals.
The built-in AllStat text references Microsoft guidance for significant RID exhaustion. In practice, administrators should preserve evidence of what consumed RIDs and should not simply re-enable allocation until the source is understood.
What to inspect
- Identify recent bulk account, computer or group creation activity.
- Check RID pool allocation events and the RID Master.
- Follow Microsoft RID exhaustion guidance before re-enabling account creation.
References
- Microsoft: global RID pool exhaustion
- Microsoft: Active Directory FSMO roles
- Microsoft: FSMO placement and optimization
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.