Hello Sun Pheara,
Thank you for posting in Q&A forum.
"Account Unknown (S-1-5-21-....) in the security Tap" means the accounts or the groups were created in the past and they are deleted now, so it will show "Account Unknown" instead of display name.
You can remove these entries under Security tab.
Tips: Before you make changes, please ensure your AD replication works fine.
Here is a similar thread for your reference.
https://answers.microsoft.com/en-us/windows/forum/all/account-unknowns-1-5-21/097fa4e9-8705-46d4-bf90-fc119da680a7
I hope the information above is helpful.
If you have any question or concern, please feel free to let us know.
Best Regards,
Daisy Zhou