When you define Group Policy Restricted Groups on a computer that is running Windows Server 2003, your Application event log records:
Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Computer: <Computer Name>
Description: Security policies are propagated with warning. 0x534: No mapping between account names and security IDs was done. Please look for more details in TroubleShooting section in Security Help.
This behavior may occur if you add a global group, or a universal group, as a member of a restricted group.
To resolve this problem, remove the global group, or the universal group, from the membership of the restricted group.