Azure Active Directory Domain Services Edit Default Domain Policy SYSVOL permissions

Question

I configured the azure active directory domain services . Everything seems to be okay, however when i open the group policy add-on from a Virtual Machine and i click on default domain policy or default domain controllers policy, i get the below message:

"The permissions for this gpo in the sysvol folder are inconsistent with those in active directory. it is recommended that these permissions be consistent. Contact an administrator who has rights to modify security on this gpo".

I suspect that this message is normal and i do not need to worry, however I'm not 100% sure.

Would you please share your opinion on this matter?

Answer 1

Maybe this one helps.
https://learn.microsoft.com/en-us/troubleshoot/windows-server/group-policy/fail-to-run-gpmc

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

@John Pil
Thank you for your post!

From your error I found some similar support requests, and when it comes to modifying the Default Domain Policies the error message that you received is expected.

Error Message:
The permissions for this gpo in the sysvol folder are inconsistent with those in active directory. it is recommended that these permissions be consistent. Contact an administrator who has rights to modify security on this gpo.

The Default Domain or Default Domain Controllers policies are not modifiable, instead the alternative is to create custom GPOs or edit the AADDC Users and AADDC Computers policies.

If you'd like to create a domain password policy, this action isn't performed by editing the Default Domain Policies, but by using the Active Directory Administrative Center and creating a fine-grained password policy to target custom groups and OUs. For more info - Password and account lockout policies on Azure Active Directory Domain Services managed domains.

I hope this helps!

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

----------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.