| Previous | Next |
| ERROR_DS_INCORRECT_ROLE_OWNER | ERROR_DS_OBJ_CLASS_VIOLATION |
ERROR_DS_RIDMGR_INIT_ERROR
The account-identifier allocator failed during RID subsystem startup
RID allocation depends on directory state in the domain naming context and on a usable local allocation pool. Microsoft documents event 16650 for allocator initialization failures, including cases where a restored DC cannot establish valid RID state. Until initialization succeeds, creation of security principals can fail even though ordinary directory reads continue to work.
Correlate this error with Directory-Services-SAM and Directory Service events instead of resetting RID values blindly. Verify the RID master, domain replication, and any recent system-state restore or virtual-machine rollback. The local DC must reconstruct or receive a valid pool through supported RID processing; manually manipulating RID registry values without understanding the allocator state can risk duplicate or skipped identifier ranges.
What to inspect
- Review event 16650 and its underlying status code.
- Verify the RID master and inbound replication of the domain NC.
- Determine whether backup restore, snapshot rollback, or manual RID invalidation preceded the failure.
References
- Microsoft: RID allocator initialization failures
- Microsoft: managing RID issuance
- Microsoft: Active Directory FSMO roles
Looking for a different code? Search another status or error code.