Solved

Warning when backing up GPO's

Posted on 2011-09-19
9
3,177 Views
Last Modified: 2012-06-22
I tried following the process described in this article: http://blogs.technet.com/b/sbs/archive/2009/04/16/how-to-backup-restore-and-re-link-group-policies-in-sbs-2008.aspx

When I followed these steps I had over 50 paragraphs of output similar to this:

GPO: Update Services Client Computers Policy...Succeeded, but note the following issues:

[Warning] The security principal [S-1-5-21-4187703203-3677896876-4144508086-2116] referenced in extension [Core Extension] cannot be resolved, but the task will continue. In the future, you can use a migration table to map or remove this security principal.
Details: No mapping between account names and security IDs was done.
 
What does this really mean and what concerns do I have with so many warnings?
0
Comment
Question by:LostInWindows
  • 3
  • 3
  • 2
  • +1
9 Comments
 
LVL 14

Expert Comment

by:JAN PAKULA
ID: 36559758
that means that you have in group policy referarls to sid numbers (users ids) which are no logen in active directory - they were deleted- to back up without errors go to given group plicy and remove unresorvable sid numbers.

JAN MA CCNA
0
 
LVL 7

Expert Comment

by:ComputerBeast
ID: 36559764
Hi,

Refer this article:

http://support.microsoft.com/kb/890737

Thank you
Anil
0
 
LVL 1

Author Comment

by:LostInWindows
ID: 36560223
The support article doesn't appear to cover SBS 2008
0
 
LVL 11

Expert Comment

by:Ackles
ID: 36567911
Try logging on as Enterprise Admin & see if you get the errors?
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 1

Author Comment

by:LostInWindows
ID: 36567984
Ho w do I remove unresolvable SID's? I don't see where exactly I would do this.
0
 
LVL 11

Accepted Solution

by:
Ackles earned 250 total points
ID: 36568062
0
 
LVL 11

Expert Comment

by:Ackles
ID: 36568102
Please go throught the below, you have to read the full discussion, the main points are:
1) Get the latest version
2) Run as Administrator

http://forums.techarena.in/active-directory/1196724.htm

A
0
 
LVL 14

Assisted Solution

by:JAN PAKULA
JAN PAKULA earned 250 total points
ID: 36572063
if you check your log file ( created whilest backing up Gps) you will see unresovable sid numbers and Gps in which are they used.
before you edit given policy (before backing up) you can have a look on settings tab and click show all - this should give you exact place in GP where bad sid is used- then just edit Gp remove wrong sids( you will know which ones from log file) and try backing up again

JAN MA CCNA
0
 
LVL 1

Author Closing Comment

by:LostInWindows
ID: 36592374
Thanks, that was it. I had to cleanup old SID's
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now