I have error when run dSHeuristics script, Windows 2016 Domain controllers and Functional level is Windows 2016

PS C:\Scripts> C:\Scripts\ADdSHeuristics.ps1
dSHeuristics has already been set to 001
Checking Authenticated Users are part of “Pre-Windows 2000 Compatible Access” group
.. It has already been removed
Going through the Hosted Orgs
.OU: OU=Tenant B,OU=Units,DC=FM,DC=contoso,DC=com
Exception calling “AddAccessRule” with “1” argument(s): “Some or all identity references could
not be translated.”
At C:\Scripts\ADdSHeuristics.ps1:78 char:5
+ $SubOUacl.AddAccessRule($SubOUace3) >$null 2>&1
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : IdentityNotMappedException

Answered question