I cannot modify our Default Domain Group policy when using AWS Directory Services

Question

We are using AWS Directory Services and I do not have edit rights on our default domain group policy.  Also, when I click on the policy a permissions error appears indicating:  "The permissions for this GPO in the SYSVOL folder are inconsistent with those in Active Directory.  It is recommended that these permissions be consistent."  I am a member of the AWS Delegated Group Policy Administrators.  I appreciate any assistance with this issue.  Thank you.

Answer

I don’t believe you can modify the default domain policy as it’s managed by AWS.

You can only modify specific/subset GPOs. 
Remember your not a domain admin either in an AWS managed directory either.

https://docs.aws.amazon.com/directoryservice/latest/admin-guide/supportedpolicysettings.html

I cannot modify our Default Domain Group policy when using AWS Directory Services

Relevanter Inhalt