Article ID: 822053 - View products that this article applies to.
When you try to create a new object in Active Directory, you may receive the following error message:
When this problem occurs, the following event may be logged in the NT Directory Service (NTDS) event log:
Windows cannot create the object because the Directory Service was unable to allocate a relative identifier.
This problem may occur if the domain controller that held the operations master role (also known as flexible single master operations or FSMO) of RID Master was removed from the domain and restored from backup. If the role of RID Master was forced onto another domain controller as a temporary replacement, when the original RID Master is restored and returned to the domain, it does not replicate with its direct replication partner and does not reclaim the role of RID Master.
Windows 2000 Service Pack 3 and Windows Server 2003 introduced features designed to help avoid the adverse effects of duplicate operations master roles existing in the same forest or domain. Domain controllers perform an initial synchronization at startup on each naming context hosted on a particular domain controller. A domain controller that holds the Schema Master, Domain Naming Master, RID Master, PDC emulator, or the Infrastructure Master role does not assume ownership of the role until it synchronizes with at least one neighbor for each writeable naming context.
To resolve this problem, follow these steps:
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
For more information about how to determine the RID Master role holder, click the following article number to view the article in the Microsoft Knowledge Base:
234790For more information about what to do if the RID Master is down for a long time, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/234790/ )How to find servers that hold Flexible Single Master Operations roles
223787For more information about restoring the RID Master after a seizure, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/223787/ )Flexible Single Master Operation transfer and seizure process
316201For more information about how to perform an authoritative restore to a domain controller, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/316201/ )"Domain controller has failed to obtain a new identifier pool" error event in Windows 2000 Server S316201 and earlier
241594For more information about FSMO placement and optimization on Windows 2000 domains, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/241594/ )How to perform an authoritative restore to a domain controller in Windows 2000
(http://support.microsoft.com/kb/223346/ )FSMO placement and optimization on Active Directory domain controllers
Article ID: 822053 - Last Review: October 30, 2006 - Revision: 1.4