Cannot create a group in Active Directory, 'The specified group already exists'.

I am trying to create a group on our Active Directory (Windows 2003 SBS based) but when I do, it says it can't create the object because it already exists...it doesn't.  Some background:

This server is going to be retired as a DC, so I'm stripping out all the roles it used to carry out for us.  The last one I removed was the Sophos Enterprise console, which is where the problem lies.  The Sophos EC has been moved to another machine and is running well, but any server which is either a DC or a PDC needs to look to an Active Directory group called Sophos Administrators for it to run.  These groups were removed when Sophos was uninstalled, but when I try to re-add one it says it already exists!!  I have had a good look through AD users and computers and it's nowhere to be found.  
LVL 3
-Juddy-Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mike ThomasConsultantCommented:
The old (deleted) group will be tombstoned and un usable, your probably better off restoring that group.

See if ad restore can get the group back for you.

http://technet.microsoft.com/en-us/sysinternals/bb963906.aspx
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
-Juddy-Author Commented:
What a fantastic app!!  It's brought back the AD objects, but they are called (example) myrestoredgroupTmpRn.........why the TmpRn suffix?
0
Mike ThomasConsultantCommented:
Not sure but maybe so you can identify them and so they won't cause conflicts? just rename them back.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

-Juddy-Author Commented:
Sorry, I'm being dim.....I suppose it's just to highlight the fact that it's been restored by the tool.  There's a GUI version too: http://www.windowsreference.com/free-utilities/adrestorenet-the-gui-version-of-adrestore/
0
Mike ThomasConsultantCommented:
BTW there is a very nice gui tool linked from this page call ADRestore.net
http://www.petri.co.il/recovering-deleted-items-active-directory.htm

Direct Link to Download
http://www.petri.co.il/downloads/ADRestore.NET.zip
0
-Juddy-Author Commented:
Point coming your way, top man!!
0
-Juddy-Author Commented:
Just great!
0
Premkumar YogeswaranAnalyst II - System AdministratorCommented:
Can you check this in AD

open command prompt and copy paste the comment below

dsquery group -name *Sophos*

also check this

dsquery user -name *Sophos*

Check this query and let us know if you find any thing...

Cheers,
Prem
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SBS

From novice to tech pro — start learning today.