>Yes, seems that this is fallout from a DFSR problem we "fixed" with MS. During the process of fixing the DFSR problem, the MS tech was changing perms on the SYSVOL and underlying folders. Mainly so he could have visibility to the folders. I bring this up b/c now, when I go to look at our current GPO's I get this message for each:
>

>The permissions for this GPO in the SYSVOL folder are inconsistent with those in Active Directory.  It is recommended that these permissions be consistent. To change the SYSVOL permissions to those in Active Directory, click OK.
>

>
>I clicked OK on each. Still can't see any settings for the GPO's.
>
>Rebuilding GPOs.
>
>Do you know how to find a copy of the Default DC Policy?

Ugh. If you have a support incident with MS I'd recommend following up there. If it's been closed I believe you can re-open it.

I assume you're looking at your GPOs as Domain Admin, and running gpedit As administrator, if not that might be worth a try ...

As for default DC policies, you can Google [domain group policy restore defaults]. Some of those results are probably more nuclear than others, but be warned, they may all be nuclear ...