Article ID: 325700
Article Last Modified on 5/28/2003
APPLIES TO
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Advanced Server
- Microsoft Metadirectory Services 2.2 Service Pack 1
This article was previously published under Q325700
SYMPTOMS
During the creation of a large number of enabled user objects, you may receive the following Event 16645 error message:
For example, an attempt to create 250,000 Active Directory accounts from iPlanet in one session might fail after approximately 100,000 users were processed.
CAUSE
As part of an enabled user-object-creation process, a security principal is allocated from the RID pool. If that number of enabled user-object creations is greater than the local RID pool and a request to the RID Master is unable to return a new pool in time, this symptom occurs.
RESOLUTION
To resolve this issue, point ADMA to the RID Master. For additional information about how to point ADMA to the RID Master, click the article number below to view the article in the Microsoft Knowledge Base:
269470 HOW TO: Specify a Specific Domain Controller per Domain in Active Directory Management Agent
This procedure prevents the extra processes that you must have to pull the RID Master across your network after the local RID pool is used up. After the initial load is completed, this is no longer an issue, and the ADMA can be redirected to another domain controller.
Additional query words: mms zoomit
Keywords: kberrmsg kbprb KB325700
