Article ID: 867462 - View products that this article applies to.
When you try to perform a backup of a Group Policy object or of multiple Group Policy objects by using the Microsoft Group Policy Management Console, you receive the following error message in the notification area of the Backup window:
This behavior occurs if a user or a group name that is referenced in a Group Policy object corresponds to an abbreviation that is defined for a built-in group that is used by the Security Descriptor Definition Language (SDDL) format. For example, this behavior occurs if you name a user or a group "SA." The "SA" abbreviation corresponds to the SDDL security identifier (SID) string that represents the built-in Schema Admins group.
If a user name or a group name matches an SDDL abbreviation that is defined for a built-in group, a function that is called by the Group Policy Management Console treats the user name or the group name as a SID. Therefore, the backup fails and you receive the error message that is mentioned in the "Symptoms" section.
To resolve the behavior, use the Active Directory Users and Computers snap-in to change the name of the user or the group that corresponds to one of the abbreviations that is used by SDDL.
The following table provides the SID string constants for well-known SIDs that are defined in SDDL.
Collapse this tableExpand this table
For more information about SID string constants, visit the following Microsoft Web site:
http://msdn2.microsoft.com/en-us/library/aa379602.aspxFor more information about the Group Policy Management Console, including information about how to download the snap-in, visit the following Microsoft Web site:
http://www.microsoft.com/windowsserver2003/gpmc/default.mspxFor additional information, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/818736/ )White paper: Migrating GPOs across domains by using the Group Policy Management Console
(http://support.microsoft.com/kb/818735/ )White paper: Administering Group Policy by using the Group Policy Management Console
Article ID: 867462 - Last Review: December 3, 2007 - Revision: 1.4
Contact us for more help
Connect with Answer Desk for expert help.