When it runs out of the allocated set of RIDs, the domain controller {0} will not be able to generate RIDs for new objects. ...