Solved

Warning when backing up GPO's

Posted on 2011-09-19
9
3,409 Views
Last Modified: 2012-06-22
I tried following the process described in this article: http://blogs.technet.com/b/sbs/archive/2009/04/16/how-to-backup-restore-and-re-link-group-policies-in-sbs-2008.aspx

When I followed these steps I had over 50 paragraphs of output similar to this:

GPO: Update Services Client Computers Policy...Succeeded, but note the following issues:

[Warning] The security principal [S-1-5-21-4187703203-3677896876-4144508086-2116] referenced in extension [Core Extension] cannot be resolved, but the task will continue. In the future, you can use a migration table to map or remove this security principal.
Details: No mapping between account names and security IDs was done.
 
What does this really mean and what concerns do I have with so many warnings?
0
Comment
Question by:LostInWindows
  • 3
  • 3
  • 2
  • +1
9 Comments
 
LVL 14

Expert Comment

by:JAN PAKULA
ID: 36559758
that means that you have in group policy referarls to sid numbers (users ids) which are no logen in active directory - they were deleted- to back up without errors go to given group plicy and remove unresorvable sid numbers.

JAN MA CCNA
0
 
LVL 7

Expert Comment

by:ComputerBeast
ID: 36559764
Hi,

Refer this article:

http://support.microsoft.com/kb/890737

Thank you
Anil
0
 
LVL 1

Author Comment

by:LostInWindows
ID: 36560223
The support article doesn't appear to cover SBS 2008
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 
LVL 11

Expert Comment

by:Ackles
ID: 36567911
Try logging on as Enterprise Admin & see if you get the errors?
0
 
LVL 1

Author Comment

by:LostInWindows
ID: 36567984
Ho w do I remove unresolvable SID's? I don't see where exactly I would do this.
0
 
LVL 11

Accepted Solution

by:
Ackles earned 250 total points
ID: 36568062
0
 
LVL 11

Expert Comment

by:Ackles
ID: 36568102
Please go throught the below, you have to read the full discussion, the main points are:
1) Get the latest version
2) Run as Administrator

http://forums.techarena.in/active-directory/1196724.htm

A
0
 
LVL 14

Assisted Solution

by:JAN PAKULA
JAN PAKULA earned 250 total points
ID: 36572063
if you check your log file ( created whilest backing up Gps) you will see unresovable sid numbers and Gps in which are they used.
before you edit given policy (before backing up) you can have a look on settings tab and click show all - this should give you exact place in GP where bad sid is used- then just edit Gp remove wrong sids( you will know which ones from log file) and try backing up again

JAN MA CCNA
0
 
LVL 1

Author Closing Comment

by:LostInWindows
ID: 36592374
Thanks, that was it. I had to cleanup old SID's
0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html?cid=Gene_Skyport) provided 218 attendees with a step-by-step guide for…
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question