I have 2 domain controllers communicating thru a Cisco site to site VPN tunnel. One domain controller is on a 192.168.0.0 network and the other is on a 10.0.0.0 network. I have checked with Cisco and the VPN tunnel is working correctly. I have DFS set up on both domain controllers and that seems to work fine. I can also add and remove users from both domain controllers with no problem. The problem I am having is the sysvol folders are not replicating. I get errors when I run dcdiag and dcdiag /fix or netdiag /fix. The error I get with dcdiag is:
"Warning could not confirm the identity of this serverin the directory versus the name returned by the DNS servers. If there are problems accessing this directory server then you may need to check that this server is correctly registered with DNS [servername] Directory binding error 5".
I have registered the DNS server, I can ping both servers with no problem using "servername" and "servername.DNSsuffix" I checked the sysvol shares and they seem to have the correct permissions on them. The sysvol has never replicated from the beginning.
Any help would be appreciated.