| DisplayName | Description | ID | Target | Category | Enabled | Instance Name | Counter Name | Frequency | Event_ID | Event Source | Alert Generate | Alert Severity | Alert Priority | Remotable | Event Log |
| RID Issuance: Global maximum has increased (EventID 16555) | The global maximum for account-identifiers (RIDs) has been increased to \%1. See http://go.microsoft.com/fwlink/?LinkId=233329 for more information including important operating system interoperability requirements. | Community.AD.2016.RID.Monitoring.Rule.GlobalMaximumHasIncreased | Microsoft.Windows.Server.2016.AD.DomainControllerRole | Alert | True | | | 0 | 16655 | Microsoft-Windows-Directory-Services-SAM | True | Error | Normal | True | System |
| RID Issuance: Periodic update on remaining RID in pool (EventID 16558) | This event is a periodic update on the remaining total quantity of available account-identifiers (RIDs). The number of remaining account-identifiers is approximately: \%1. | Community.AD.2016.RID.Monitoring.Rule.PeriodicUpdateEvent | Microsoft.Windows.Server.2016.AD.DomainControllerRole | Alert | True | | | 0 | 16658 | Microsoft-Windows-Directory-Services-SAM | True | Warning | Normal | True | System |
| RID Issuance: Configured pool size is greate than supported maximum (EventID 16553) | A pool size for account-identifiers (RIDs) that was configured by an Administrator is greater than the supported maximum. The maximum value of 15,000 will be used when the domain controller is the RID master. See http://go.microsoft.com/fwlink/?LinkId=225963 for more information. | Community.AD.2016.RID.Monitoring.Rule.PoolExceedsMaximum | Microsoft.Windows.Server.2016.AD.DomainControllerRole | Alert | True | | | 0 | 16653 | Microsoft-Windows-Directory-Services-SAM | True | Error | Normal | True | System |
| RID Issuance: Pool has been invalidated (EventID 16554) | A pool of account-identifiers (RIDs) has been invalidated. This may occur in the following expected cases: | Community.AD.2016.RID.Monitoring.Rule.PoolInvalidated | Microsoft.Windows.Server.2016.AD.DomainControllerRole | Alert | True | | | 0 | 16654 | Microsoft-Windows-Directory-Services-SAM | True | Error | Normal | True | System |
| RID Issuance: Pool threshold has been reached - Critical level (EventID 16557) | Action required! An account-identifier (RID) pool was allocated to this domain controller. The pool value indicates this domain has consumed a considerable portion of the total available account-identifiers. | Community.AD.2016.RID.Monitoring.Rule.PoolThresholdReachedCritical | Microsoft.Windows.Server.2016.AD.DomainControllerRole | Alert | True | | | 0 | 16657 | Microsoft-Windows-Directory-Services-SAM | True | Error | Normal | True | System |
| RID Issuance: Pool threshold has been reached - Warning level (EventID 16556) | Action required! An account-identifier (RID) pool was allocated to this domain controller. The pool value indicates this domain has consumed a considerable portion of the total available account-identifiers. | Community.AD.2016.RID.Monitoring.Rule.PoolThresholdReachedWarning | Microsoft.Windows.Server.2016.AD.DomainControllerRole | Alert | True | | | 0 | 16656 | Microsoft-Windows-Directory-Services-SAM | True | Error | Normal | True | System |