Running Samba AD Domain Controllers in large domains
From SambaWiki
dbcheck
Subtree rename
DRS replication
RID allocation
Due to longer replication times, the internal queue of replications in the drepl_server process will be unable to be processed. This might have an effect on RID allocation which uses the same flow of replication operations. Avoid attempting a full synchronization while adding bulk users simultaneously, otherwise the DC may run out of RIDs to allocate from its pool.