You cannot delete a group in a Windows Server 2003-based domain

Article ID: 948602 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

You cannot delete a group in a Windows Server 2003-based domain.
Back to the top | Give Feedback

CAUSE

This problem occurs because there is a conflict between objects that have the same objectSID value. Specifically, a Foreign Security Principal (FSP) object has a name that conflicts with another FSP object. When this problem occurs, the FSP code lets you manipulate only the older FSP object.
Back to the top | Give Feedback

RESOLUTION

To resolve the problem, follow these steps:
  1. Use the LDP utility to rename the older object so that it has a new security identifier (SID).
  2. Delete the other conflicting object.
  3. Delete the original object that you renamed in step 1.
Back to the top | Give Feedback

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Back to the top | Give Feedback

Properties

Article ID: 948602 - Last Review: March 4, 2008 - Revision: 1.0
APPLIES TO
  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  • Microsoft Windows Server 2003, Datacenter x64 Edition
  • Microsoft Windows Server 2003, Enterprise x64 Edition
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
Keywords: 
kbexpertiseinter kbtshoot kbprb KB948602
Back to the top | Give Feedback

Give Feedback

 
Back to the topBack to the top