This problem occurs because Windows cannot resolve security identifiers (SIDs) to names. An SID is a numeric value that identifies a user or group. For each access control entry (ACE), an SID identifies the user or the group for whom access is permitted, denied, or audited.
http://support.microsoft.com/kb/826452/en-usRe-stating domain servers and restarting client machines solve it.