Purpose

This documents details how to identify and resolve the error "An error (1332) occurred while enumerating the group membership. The members SID could not be resolved.

Cause

A member (domain user) of the local Administrators group may have been deleted from Active Directory and the account name could not be enumerated.

Solution

On the local machine, delete all domain members that do not exist in Active Directory from the following groups:

• Administrators
• CCS Service Accounts
• ESM

Additional Information

The Microsoft tool PsGetsid allows you to translate SIDs to their display name and vice versa. It works on builtin accounts, domain accounts, and local accounts. PsGetsid can be downloaded here: PsGetSid - Windows Sysinternals | Microsoft Docs

Affected Products

Ivanti Patch for SCCM