Either you don’t have permissions or the RIDMaster FSMO role holder is unavailable to create new relative identifiers
1.Open Active Directory Users and Computers.
2.Right-click the domain node, and then click Operations Masters.
3.On the RID tab, under Operations masters, view the current RID master.
Check that its available – if not bring it back on line