| Previous | Next |
| ERROR_DS_NO_RIDS_ALLOCATED | ERROR_DS_INCORRECT_ROLE_OWNER |
ERROR_DS_NO_MORE_RIDS
RID allocation reached a domain-wide exhaustion condition
The RID master owns the domain-wide unallocated RID pool and assigns blocks to domain controllers. This is fundamentally different from one DC temporarily running out of its local block: the global allocation mechanism itself has no RID that it is willing or able to issue under the current domain state.
Use the RID issuance events to determine whether the domain is near the global RID ceiling, whether the extended RID pool was deliberately enabled, and whether the protection mechanism has disabled further allocation. Repeatedly transferring the RID master does not create new identifier space. Before any administrative re-enable action, account for abnormal RID consumption, restored DCs, automated account churn, and unexpected pool invalidations.
What to inspect
- Inspect RID issuance events on the RID master for ceiling and protection warnings.
- Estimate RID consumption and identify unusually rapid principal creation or deletion.
- Do not seize or transfer the RID role merely to bypass an exhaustion condition.
References
- Microsoft: managing RID issuance
- Microsoft: Active Directory FSMO roles
- Microsoft: transfer FSMO roles
Looking for a different code? Search another status or error code.