Rich

Looks like maybe a user or group to which you have given access, but the accounts/groups no longer exists in AD. (My guess anyway) I usually just allow ANY from...

Of course! Group Policies are applied to OU's in AD. Each GPO you apply to the same container immediately overwrites any conflicting previously-applied policy via inheritance. You can change the...

Yes you can. You do not select. You simply type them out. Ideally you are not configuring directly on the DC. You should be using RSAT in a prod environment....

So would that mean your DN would look something like this: CN=Johnson, Rich,OU=Tier0,OU=PAWAdmins,OU=Users,OU=Merrick,DC=devsec,DC=local Is that even possible??