Share via


RID Manager

Applies To: Windows Server 2008 R2

The relative ID (RID) manager is responsible for providing numbers that are used to create unique security identifiers (SIDs) for each account in a ___domain.

Aspects

The following is a list of all aspects that are part of this managed entity:

Name Description

RID Pool Request

Users, computers, and groups stored in Active Directory are collectively known as security principals. Each security principal is assigned a unique alphanumeric string called a SID. The SID includes a ___domain prefix identifier that uniquely identifies the ___domain and a relative identifier (RID) that uniquely identifies the security principal within the ___domain. The RID is a monotonically increasing number at the end of the SID.

Each ___domain controller is assigned a pool of RIDs from the global RID pool by the ___domain controller that holds the RID master role (also known as flexible single master operations or FSMO) in each Active Directory ___domain. The RID master (also known as the RID pool manager, RID manager, or RID operations master) is responsible for issuing a unique RID pool to each ___domain controller in its ___domain. By default, RID pools are obtained in increments of 500. Since RIDs are 30 bits in length, a maximum of 1,073,741,824 (230) security principals can be created in an Active Directory ___domain. Newly promoted ___domain controllers must acquire a RID pool before they can advertise their availability to Active Directory clients or share the SYSVOL. Existing ___domain controllers require additional RID allocations in order to continue creating security principals when their current RID pool becomes depleted.

Active Directory