This domain controller cannot create any new objects because it has not received an allocation of relative IDs (RID) from the RID operations master.
An initial account-identifier pool has not yet been allocated to this domain controller. A possible reason for this is that the domain controller has been unable to contact the master domain controller, possibly due to connectivity or network problems. Account creation will fail on this domain controller until the pool is obtained.
A possible reason for this is that the domain controller has been unable to contact the RID operations master, possibly as a result of connectivity or network problems.
Check to see what the current RID master is, and make sure that this domain controller can contact it.
For more information, see:
Microsoft Help and Support for Microsoft Windows Server 2008 and above
Microsoft Knowledge Base