When you define Group Policy Restricted Groups on a computer that is running Windows Server 2003,
your Application event log records:
Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: MM/DD/YYYY
Time: HH:MM:SS
User: N/A
Computer: <Computer Name>
Description: Security policies are propagated with warning. 0x534: No mapping between account names and security IDs was done.
Please look for more details in TroubleShooting section in Security Help.
This behavior may occur if you add a global group, or a universal group, as a member of a restricted group.
To resolve this problem, remove the global group, or the universal group, from the membership of the restricted group.