The requested modification for group %1 could not be performed. This is because this group is linked through msDS-OIDToGroupLinkBl ...

The requested modification for group %1 could not be performed. This is because this group is linked through msDS-OIDToGroupLinkBl to a certificate issuance policy descriptor. Such groups should be security enabled, they should not have any members, and they should be universal.
The requested operation was %4.
The error is %5.