Lori, one likely reason you're unable to use the Default Domain Controller Security Policy and the Domain Security Policy icons has to do with the version of Administration Tools that you might be ...

Google announced that the lock will be replaced by a new “tune” icon with the release of Chrome 117 in September to help users better understand what its actual purpose is.