Unusual problem. Single w2k3 domain, 3 DCs. attempting to edit a gpo either thru GPE or GPMC works fine EXCEPT when you click on Security Settings, you get an hour glass and it never comes back (waited over night). This happens editing the security settings on any GPO - old or new - from any DC or server. HOWEVER, editing any GPO from a W2K server works. Again you can edit any other setting - only security breaks. No errors, no events, all other AD health is fine.

We are going to try moving the PDC role to another box and to repair their time structure (they set all DCs to sync independently to an external time source and getting errors.)

Any one seen this or have ideas on what to do?