Yes, seems that this is fallout from a DFSR problem we "fixed" with MS. During the process of fixing the DFSR problem, the MS tech was changing perms on the SYSVOL and underlying folders. Mainly so he could have visibility to the folders. I bring this up b/c now, when I go to look at our current GPO's I get this message for each:
The permissions for this GPO in the SYSVOL folder are inconsistent with those in Active Directory. It is recommended that these permissions be consistent. To change the SYSVOL permissions to those in Active Directory, click OK.
I clicked OK on each. Still can't see any settings for the GPO's.
Rebuilding GPOs.
Do you know how to find a copy of the Default DC Policy?