Solved

Warning when backing up GPO's

Posted on 2011-09-19
9
3,243 Views
Last Modified: 2012-06-22
I tried following the process described in this article: http://blogs.technet.com/b/sbs/archive/2009/04/16/how-to-backup-restore-and-re-link-group-policies-in-sbs-2008.aspx

When I followed these steps I had over 50 paragraphs of output similar to this:

GPO: Update Services Client Computers Policy...Succeeded, but note the following issues:

[Warning] The security principal [S-1-5-21-4187703203-3677896876-4144508086-2116] referenced in extension [Core Extension] cannot be resolved, but the task will continue. In the future, you can use a migration table to map or remove this security principal.
Details: No mapping between account names and security IDs was done.
 
What does this really mean and what concerns do I have with so many warnings?
0
Comment
Question by:LostInWindows
  • 3
  • 3
  • 2
  • +1
9 Comments
 
LVL 14

Expert Comment

by:JAN PAKULA
ID: 36559758
that means that you have in group policy referarls to sid numbers (users ids) which are no logen in active directory - they were deleted- to back up without errors go to given group plicy and remove unresorvable sid numbers.

JAN MA CCNA
0
 
LVL 7

Expert Comment

by:ComputerBeast
ID: 36559764
Hi,

Refer this article:

http://support.microsoft.com/kb/890737

Thank you
Anil
0
 
LVL 1

Author Comment

by:LostInWindows
ID: 36560223
The support article doesn't appear to cover SBS 2008
0
 
LVL 11

Expert Comment

by:Ackles
ID: 36567911
Try logging on as Enterprise Admin & see if you get the errors?
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 1

Author Comment

by:LostInWindows
ID: 36567984
Ho w do I remove unresolvable SID's? I don't see where exactly I would do this.
0
 
LVL 11

Accepted Solution

by:
Ackles earned 250 total points
ID: 36568062
0
 
LVL 11

Expert Comment

by:Ackles
ID: 36568102
Please go throught the below, you have to read the full discussion, the main points are:
1) Get the latest version
2) Run as Administrator

http://forums.techarena.in/active-directory/1196724.htm

A
0
 
LVL 14

Assisted Solution

by:JAN PAKULA
JAN PAKULA earned 250 total points
ID: 36572063
if you check your log file ( created whilest backing up Gps) you will see unresovable sid numbers and Gps in which are they used.
before you edit given policy (before backing up) you can have a look on settings tab and click show all - this should give you exact place in GP where bad sid is used- then just edit Gp remove wrong sids( you will know which ones from log file) and try backing up again

JAN MA CCNA
0
 
LVL 1

Author Closing Comment

by:LostInWindows
ID: 36592374
Thanks, that was it. I had to cleanup old SID's
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Resolve DNS query failed errors for Exchange
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now