we have 2 domain controllers, which gave us some issues, mainly replication. Because team did a snapshot restore of month old and the other dc was not restored too at same time so this kinda messed up the server!
So we have turned off replication for now and working just off one server which hosts all the 5 FSMO roles and always did.
But one issue we having is when we create a user account we get below error
Windows cannot create the object because the Directory Service was unable to allocate a relative identifier.
even though that DC is the RID master.
any ideas what i can do? its a live dc and the only one so cant afford to do much changes and restart unless out of hours.