We are trying to modify the default domain policy using the standard MS GPO management console. If we open the console, when we point to the DSFW SYSVOL we are getting an error:
the permissions for this GPO in the SYSVOL folder are inconsistent with those in Active Directoy. It is recommended that these permissions be consistent. To change the SYSVOL permissions to those in Active Directory, click OK.

We are given an option to press OK. So far we have resisted this, in case it damages something in DSFW.

My questions are:

Can we press ok?

How should we be updating the default domain policy?
We need to change a setting in the policy.

Many thanks!