Microsoft KB Archive/867462

= &quot;Invalid pointer&quot; error message when you try to back up a Group Policy object by using the Group Policy Management Console in a Windows Server 2003 domain or in a Windows 2000 domain =

Article ID: 867462

Article Last Modified on 12/3/2007

-

APPLIES TO


 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
 * Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise x64 Edition
 * Microsoft Windows Server 2003, 64-Bit Datacenter Edition
 * Microsoft Windows Small Business Server 2003 Standard Edition
 * Microsoft Windows Small Business Server 2003 Premium Edition
 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Datacenter Server

-





SYMPTOMS
When you try to perform a backup of a Group Policy object or of multiple Group Policy objects by using the Microsoft Group Policy Management Console, you receive the following error message in the notification area of the Backup window:

GPO: ...Failed

Invalid pointer



CAUSE
This behavior occurs if a user or a group name that is referenced in a Group Policy object corresponds to an abbreviation that is defined for a built-in group that is used by the Security Descriptor Definition Language (SDDL) format. For example, this behavior occurs if you name a user or a group &quot;SA.&quot; The &quot;SA&quot; abbreviation corresponds to the SDDL security identifier (SID) string that represents the built-in Schema Admins group.

If a user name or a group name matches an SDDL abbreviation that is defined for a built-in group, a function that is called by the Group Policy Management Console treats the user name or the group name as a SID. Therefore, the backup fails and you receive the error message that is mentioned in the &quot;Symptoms&quot; section.



RESOLUTION
To resolve the behavior, use the Active Directory Users and Computers snap-in to change the name of the user or the group that corresponds to one of the abbreviations that is used by SDDL.



MORE INFORMATION
The following table provides the SID string constants for well-known SIDs that are defined in SDDL.

