I have 3 Domain Controllers running on Windows server 2012, we are using DFSR, GPMC is showing this message:
In a coople of GPOs I got this:
I tried to remove Domain Admins group and then add it using icacls command but it did not work (I ran the CMD as administrator), Is there something else I can do or check?

