When you use Group Policy Management to view a GPO in a Windows Server 2003 that is joined to a Windows 2000 domain, you receive:
The permissions for this GPO in the SYSVOL folder are inconsistent with those in Active Directory. It is recommended that these permissions be consistent. Contact an administrator who has rights to modify security on this GPO.
NOTE: If the Windows 2000 domain controllers were upgraded to SP4 before creating the domain, this problem does not occur.
NOTE: Upgrading the Windows 2000 domain controllers to SP4 after the domain has been created does NOT fix this behavior.