You cannot delete a group in a Windows Server 2003-based domain

Article translations Article translations
Article ID: 948602 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

You cannot delete a group in a Windows Server 2003-based domain.

CAUSE

This problem occurs because there is a conflict between objects that have the same objectSID value. Specifically, a Foreign Security Principal (FSP) object has a name that conflicts with another FSP object. When this problem occurs, the FSP code lets you manipulate only the older FSP object.

RESOLUTION

To resolve the problem, follow these steps:
  1. Use the LDP utility to rename the older object so that it has a new security identifier (SID).
  2. Delete the other conflicting object.
  3. Delete the original object that you renamed in step 1.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Properties

Article ID: 948602 - Last Review: March 4, 2008 - Revision: 1.0
APPLIES TO
  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  • Microsoft Windows Server 2003, Datacenter x64 Edition
  • Microsoft Windows Server 2003, Enterprise x64 Edition
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
Keywords: 
kbexpertiseinter kbtshoot kbprb KB948602

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com