JSI Tip 9966. You receive a 'constraint violation occurred' error when you assign an IPsec policy on Windows Server 2003?

After creating an OU (Organizational Unit) on a Windows Server 2003 computer, you attempt to assign an IPsec (Internet Protocol security) policy to the GPO of the new OU and receive the A constraint violation occurred error message.

This behavior will occur if:

To workaround this behavior, make sure that the Group Policy Object Editor snap-in and the Active Directory Users and Computers snap-in connect to the same domain controller.