FRS Problems

Hello everyone, I need some help please. Just as a heads up, I have searched endlessly through the internet for resolutions to my issue and found no concrete answer...which is why I am posting here. If someone could help that would me much appreciated!

We set up a new secondary DC on our network. The first DC is running server 2k3 R1 with all the latest updates and service packs. The second DC is server 2k3 R2 with all the updates as well. They can both see each other, they see AD just fine, as well as DNS and DHCP. The secondary DC can give out IP's and resolve DNS names if the main DC is down.

The problem we are running into is that the main DC cannot replicate the sysvol and netlogon sets to the secondary DC. DC1 lets call it, starts FRS just fine, sees DC2 and begins replication. On DC2, it sees the incoming replication, but FRS errors out each time on DC2. AD replication works great between the two and DNS/DHCP both update between both servers. I will post the results from the netdiag, dcdiag and other log files that should help with this issue at the end of the post. Also, DCDIAG will fail DC1 running as a time server, but using various tools shows us it is functioning as a time server...but will not advertise. We have a different box that handles NTP and our DC1 hands out the info to the clients from the NTP server.

I can't think of anything else besides the logs I would need to add in here...so here they are:
DC1
DCDIAG
Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Domain-DC-Server-Pool\DC1
Starting test: Connectivity
......................... DC1 passed test Connectivity

Doing primary tests

Testing server: Domain-DC-Server-Pool\DC1
Starting test: Replications
......................... DC1 passed test Replications
Starting test: NCSecDesc
......................... DC1 passed test NCSecDesc
Starting test: NetLogons
......................... DC1 passed test NetLogons
Starting test: Advertising
Warning: DC1 is not advertising as a time server.
......................... DC1 failed test Advertising
Starting test: KnowsOfRoleHolders
......................... DC1 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... DC1 passed test RidManager
Starting test: MachineAccount
......................... DC1 passed test MachineAccount
Starting test: Services
......................... DC1 passed test Services
Starting test: ObjectsReplicated
......................... DC1 passed test ObjectsReplicated
Starting test: frssysvol
......................... DC1 passed test frssysvol
Starting test: frsevent
......................... DC1 passed test frsevent
Starting test: kccevent
......................... DC1 passed test kccevent
Starting test: systemlog
......................... DC1 passed test systemlog
Starting test: VerifyReferences
......................... DC1 passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : Domain
Starting test: CrossRefValidation
......................... domain passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... domain passed test CheckSDRefDom

Running enterprise tests on : domain.local
Starting test: Intersite
......................... domain.local passed test Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error 135
5
A Good Time Server could not be located.
......................... domain.local failed test FsmoCheck

Netdiag
Computer Name: DC1
DNS Host Name: DC1.domain.local
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 15 Model 2 Stepping 7, GenuineIntel
List of installed hotfixes :
KB911564
KB915800-v9
KB921503
KB925398_WMP64
KB925876
KB925902
KB926122
KB927891
KB929123
KB930178
KB931784
KB931836
KB932168
KB933360
KB933566
KB933566-IE7
KB933729
KB933854
KB935839
KB935840
KB935966
KB936021
KB936357
KB936782
KB937143-IE7
KB937455
KB938127-IE7
KB938464
KB938759-v4
KB939653-IE7
KB941202
KB941568
KB941569
KB941644
KB941672
KB941693
KB942615-IE7
KB942763
KB942830
KB942831
KB943055
KB943460
KB943484
KB943485
KB943729
KB944533-IE7
KB944653
KB945553
KB946026
KB947864-IE7
KB948496
KB948590
KB948745
KB948881
KB949014
KB950759-IE7
KB950760
KB950762
KB950974
KB951066
KB951072-v2
KB951698
KB951746
KB951748
KB952954
KB953838-IE7
KB953839
KB954211
KB956390-IE7
KB956803
KB956841
KB957095
KB958644
Q147222


Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : Intel Pro 1000 MT Gigabit Ethernet Adapter - onboard

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : DC1
IP Address . . . . . . . . : x.x.x.x
Subnet Mask. . . . . . . . : x.x.x.x
IP Address . . . . . . . . : x.x.x.x
Subnet Mask. . . . . . . . : x.x.x.x
Default Gateway. . . . . . : x.x.x.x
Primary WINS Server. . . . : x.x.x.x
Dns Servers. . . . . . . . : x.x.x.x
x.x.x.x


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Passed


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{15B62E86-7860-4FF4-864D-ECE02638DA9E}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server 'x.x.x.x' and other DCs also have some of the names registered.
[WARNING] The DNS entries for this DC are not registered correctly on DNS server 'x.x.x.x'. Please wait for 30 minutes for DNS server replication.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{15B62E86-7860-4FF4-864D-ECE02638DA9E}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{15B62E86-7860-4FF4-864D-ECE02638DA9E}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed
[WARNING] Failed to query SPN registration on DC 'DC2.domain.local'.


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully

FRS Erros from DC2:
11/24/2008 9:07:08 AM NtFrs Information None 13501 N/A DC2 The File Replication Service is starting.
11/24/2008 9:06:56 AM NtFrs Information None 13501 N/A DC2 The File Replication Service is starting.
11/24/2008 9:04:18 AM NtFrs Warning None 13508 N/A DC2 "The File Replication Service is having trouble enabling replication from DC1 to DC2 for c:\windows\sysvol\domain using the DNS name dc1.domain.local. FRS will keep retrying.
Following are some of the reasons you would see this warning.

[1] FRS can not correctly resolve the DNS name dc1.domain.local from this computer.
[2] FRS is not running on dc1.domain.local.
[3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.

This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established."
11/24/2008 9:02:37 AM NtFrs Warning None 13565 N/A DC2 "File Replication Service is initializing the system volume with data from another domain controller. Computer DC2 cannot become a domain controller until this process is complete. The system volume will then be shared as SYSVOL.

To check for the SYSVOL share, at the command prompt, type:
net share

When File Replication Service completes the initialization process, the SYSVOL share will appear.

The initialization of the system volume can take some time. The time is dependent on the amount of data in the system volume, the availability of other domain controllers, and the replication interval between domain controllers."
11/24/2008 9:02:37 AM NtFrs Information None 13501 N/A DC2 The File Replication Service is starting.
11/24/2008 9:02:36 AM NtFrs Information None 13503 N/A DC2 The File Replication Service has stopped.
11/24/2008 9:02:22 AM NtFrs Information None 13502 N/A DC2 The File Replication Service is stopping.
11/24/2008 8:30:36 AM NtFrs Warning None 13508 N/A DC2 "The File Replication Service is having trouble enabling replication from DC1 to DC2 for c:\windows\sysvol\domain using the DNS name DC1.domain.local. FRS will keep retrying.
Following are some of the reasons you would see this warning.

[1] FRS can not correctly resolve the DNS name dc1.domain.local from this computer.
[2] FRS is not running on dc1.domain.local.
[3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.

This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established."
11/24/2008 8:28:55 AM NtFrs Warning None 13565 N/A DC2 "File Replication Service is initializing the system volume with data from another domain controller. Computer DC2 cannot become a domain controller until this process is complete. The system volume will then be shared as SYSVOL.

To check for the SYSVOL share, at the command prompt, type:
net share

When File Replication Service completes the initialization process, the SYSVOL share will appear.

The initialization of the system volume can take some time. The time is dependent on the amount of data in the system volume, the availability of other domain controllers, and the replication interval between domain controllers."
11/24/2008 8:28:55 AM NtFrs Information None 13501 N/A DC2 The File Replication Service is starting.
11/24/2008 8:28:55 AM NtFrs Information None 13503 N/A DC2 The File Replication Service has stopped.
11/24/2008 8:28:42 AM NtFrs Information None 13502 N/A DC2 The File Replication Service is stopping.
11/24/2008 3:48:04 AM NtFrs Warning None 13508 N/A DC2 "The File Replication Service is having trouble enabling replication from DC1 to DC2 for c:\windows\sysvol\domain using the DNS name DC1.domain.local. FRS will keep retrying.
Following are some of the reasons you would see this warning.

[1] FRS can not correctly resolve the DNS name dc1.domain.local from this computer.
[2] FRS is not running on dc1.domain.local.
[3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.

This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established."
11/24/2008 3:46:23 AM NtFrs Information None 13554 N/A DC2 "The File Replication Service successfully added the connections shown below to the replica set:
""DOMAIN SYSTEM VOLUME (SYSVOL SHARE)""

""dc1.domain.local""
""dc1.domain.local""