This is the error description for the Event ID:
(Security policies are propagated with warning. 0x534 : No mapping between account names and security IDs was done.
For best results in resolving this event, log on with a non-administrative account and search http://support.microsoft.com
for "troubleshooting 1202 events".
A user account in one or more Group policy objects (GPOs) could not be resolved to a SID. This error is possibly caused by a mistyped nor deleted user account referenced in either the User Rights or Restricted Groups branch of a GPO. To resolve this event, contact an administrator in the domain to perform the following actions:
1.Identify accounts that could not be resolved to a SID: From the command prompt, type: FIND /I "Cannot find" %SYSTEMROOT%\Security\Logs
The string following "Cannot find" in the FIND output identifies the problem account names.
Example: Cannot find JohnDough.
In this case, the SID for username "JohnDough" could not be determined. This most likely occurs because the account was deleted, renamed, or is spelled differently (e.g. "JohnDoe").)
When I do this the user is Power Users. And If I go to Administrative tools --> then Domain controller security policy the shortcut is gone? that is another strange issue.
this is not a huge problem but those event errors sure are piling up.