Why doesn't the TSInternetUser account show up in the Security Principal Mapping screen during a GPO (NETIQKB29276)

goal
Why doesn't the TSInternetUser account show up in the Security Principal Mapping screen during a GPO migration?

fact
NetIQ Group Policy Administrator 3.0

fact
NetIQ Group Policy Administrator 4.x

fact
NetIQ Group Policy Administrator 5.0

symptom
The TSInternetUser account does not show up in the Security Principal Mapping screen when I try to map the account during a Repository migration.

cause
This is expected behavior. This account will only be enabled if you enable 'Terminal Services Internet Connector License'.

fix

The account TSInternetUser is a user account used by Terminal Services.  The Terminal Services Internet Connector License uses it. When Internet Connector Licensing is enabled, a Windows 2000-based server accepts 200 anonymous-only connections. Terminal Services clients are not prompted with a logon dialog box; they are logged on automatically with the TsInternetUser account.  If the target domain of the migration does not have Terminal Services Internet Connector License enabled, there will not be a TSInternetUser

Formerly known as NETIQKB29276