The directory service has exhausted the pool of relative identifiers.

[John]

Hi.

I am getting an "The directory service has exhausted the pool of
relative identifiers." error every time I try to create a user, group
or any other object on my home network. (Single W2K Adv. Server with
all 5 fsmo roles.)

A perusal of Event Viewer shows a few SAM entries saying:- "The
request for a new account-identifier pool has completed successfully."
(I use my home network for testing scripts and stuff that create
objects, for a production environment so I would expect the DC to be
requesting RID pools now and again wouldn't I?)
Then, in the last few days I see stop errors saying:- "The domain
controller has failed to obtain a new identifier pool."

It gets worse! Netdom Query Fsmo reports domain unavailable or non
existant. (NetDom Query DC etc. works fine.)

DNS and WINS appear to be functioning properly and surely, the RID
master must be OK? (I am logged on to that box now!)

Any help would be much appreciated.

Thanx.

 

[\Richard McCall [MSFT]\]

Run DCdiag /v /test:RidManager. You will have to install the support tools
from the w2k server cd. If the system state has been restored to this server
and there are no replication partners available then this can cause it. So
can DNS name resolution. The output from the test will show you the domain
rid pool available and what the server was last able to get. Possibly a
better error on why the RID pool will not initialize.

 

[John]

Thanks for your response Richard.

I have run DCDiag with the following result:-

Starting test: RidManager
* Available RID Pool for the Domain is 4605 to 1073741823
* home-server-1.NEWHOME.local is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 4105 to 4604
* rIDNextRID: 4604
* rIDPreviousAllocationPool is 4105 to 4604
* Warning :Next rid pool not allocated
* Warning :There is less than 0% available RIDs in the current
pool
......................... HOME-SERVER-1 passed test RidManager

I'm not entirely sure I understand what its telling me but the
warnings certainly seem to confirm that there is something up with the
RID pool.

My next move would be to introduce a second DC into the domain and try
siezing the RID Master role. I don't really want to go to such lengths
if I can help it. What do you think?

Run DCdiag /v /test:RidManager. You will have to install the support tools
from the w2k server cd. If the system state has been restored to this server
and there are no replication partners available then this can cause it. So
can DNS name resolution. The output from the test will show you the domain
rid pool available and what the server was last able to get. Possibly a
better error on why the RID pool will not initialize.

--
Richard McCall [MSFT]

"This posting is provided "AS IS" with no warranties, and confers no
rights."

Hi.

I am getting an "The directory service has exhausted the pool of
relative identifiers." error every time I try to create a user, group
or any other object on my home network. (Single W2K Adv. Server with
all 5 fsmo roles.)

A perusal of Event Viewer shows a few SAM entries saying:- "The
request for a new account-identifier pool has completed successfully."
(I use my home network for testing scripts and stuff that create
objects, for a production environment so I would expect the DC to be
requesting RID pools now and again wouldn't I?)
Then, in the last few days I see stop errors saying:- "The domain
controller has failed to obtain a new identifier pool."

It gets worse! Netdom Query Fsmo reports domain unavailable or non
existant. (NetDom Query DC etc. works fine.)

DNS and WINS appear to be functioning properly and surely, the RID
master must be OK? (I am logged on to that box now!)

Any help would be much appreciated.

Thanx.