Warning when backing up GPO's

I tried following the process described in this article: http://blogs.technet.com/b/sbs/archive/2009/04/16/how-to-backup-restore-and-re-link-group-policies-in-sbs-2008.aspx

When I followed these steps I had over 50 paragraphs of output similar to this:

GPO: Update Services Client Computers Policy...Succeeded, but note the following issues:

[Warning] The security principal [S-1-5-21-4187703203-3677896876-4144508086-2116] referenced in extension [Core Extension] cannot be resolved, but the task will continue. In the future, you can use a migration table to map or remove this security principal.
Details: No mapping between account names and security IDs was done.
 
What does this really mean and what concerns do I have with so many warnings?
LVL 1
LostInWindowsAsked:
Who is Participating?
 
JAN PAKULAICT Infranstructure ManagerCommented:
that means that you have in group policy referarls to sid numbers (users ids) which are no logen in active directory - they were deleted- to back up without errors go to given group plicy and remove unresorvable sid numbers.

JAN MA CCNA
0
 
ComputerBeastCommented:
Hi,

Refer this article:

http://support.microsoft.com/kb/890737

Thank you
Anil
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
LostInWindowsAuthor Commented:
The support article doesn't appear to cover SBS 2008
0
 
AcklesCommented:
Try logging on as Enterprise Admin & see if you get the errors?
0
 
LostInWindowsAuthor Commented:
Ho w do I remove unresolvable SID's? I don't see where exactly I would do this.
0
 
AcklesCommented:
Please go throught the below, you have to read the full discussion, the main points are:
1) Get the latest version
2) Run as Administrator

http://forums.techarena.in/active-directory/1196724.htm

A
0
 
JAN PAKULAConnect With a Mentor ICT Infranstructure ManagerCommented:
if you check your log file ( created whilest backing up Gps) you will see unresovable sid numbers and Gps in which are they used.
before you edit given policy (before backing up) you can have a look on settings tab and click show all - this should give you exact place in GP where bad sid is used- then just edit Gp remove wrong sids( you will know which ones from log file) and try backing up again

JAN MA CCNA
0
 
LostInWindowsAuthor Commented:
Thanks, that was it. I had to cleanup old SID's
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.