Recently added secondary domain controller, dcdiag errors

Hiya,

I recently just added a secondary domain controller.

Parent DC is Windows Server 2003, the secondary DC is Windows Server 2008 R2.

When I run DCDIAG on Windows Server 2003 I get the following error messages

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests
   
   Testing server: Default-First-Site-Name\AXIOMSRV
      Starting test: Connectivity
         ......................... AXIOMSRV passed test Connectivity

Doing primary tests
   
   Testing server: Default-First-Site-Name\AXIOMSRV
      Starting test: Replications
         [Replications Check,AXIOMSRV] A recent replication attempt failed:
            From AXIOMSRV2 to AXIOMSRV
            Naming Context: DC=ForestDnsZones,DC=axiom,DC=lan
            The replication generated an error (1908):
            Win32 Error 1908
            The failure occurred at 2012-10-25 21:06:32.
            The last success occurred at 2012-10-25 20:54:37.
            1 failures have occurred since the last success.
            Kerberos Error.
            A KDC was not found to authenticate the call.
            Check that sufficient domain controllers are available.
         [Replications Check,AXIOMSRV] A recent replication attempt failed:
            From AXIOMSRV2 to AXIOMSRV
            Naming Context: CN=Schema,CN=Configuration,DC=axiom,DC=lan
            The replication generated an error (1908):
            Win32 Error 1908
            The failure occurred at 2012-10-25 21:06:32.
            The last success occurred at 2012-10-25 20:54:37.
            1 failures have occurred since the last success.
            Kerberos Error.
            A KDC was not found to authenticate the call.
            Check that sufficient domain controllers are available.
         [Replications Check,AXIOMSRV] A recent replication attempt failed:
            From AXIOMSRV2 to AXIOMSRV
            Naming Context: CN=Configuration,DC=axiom,DC=lan
            The replication generated an error (1908):
            Win32 Error 1908
            The failure occurred at 2012-10-25 21:06:31.
            The last success occurred at 2012-10-25 20:54:37.
            1 failures have occurred since the last success.
            Kerberos Error.
            A KDC was not found to authenticate the call.
            Check that sufficient domain controllers are available.
         ......................... AXIOMSRV passed test Replications
      Starting test: NCSecDesc
         ......................... AXIOMSRV passed test NCSecDesc
      Starting test: NetLogons
         ......................... AXIOMSRV passed test NetLogons
      Starting test: Advertising
         ......................... AXIOMSRV passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... AXIOMSRV passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... AXIOMSRV passed test RidManager
      Starting test: MachineAccount
         ......................... AXIOMSRV passed test MachineAccount
      Starting test: Services
         ......................... AXIOMSRV passed test Services
      Starting test: ObjectsReplicated
         ......................... AXIOMSRV passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... AXIOMSRV passed test frssysvol
      Starting test: frsevent
         There are warning or error events within the last 24 hours after the

         SYSVOL has been shared.  Failing SYSVOL replication problems may cause

         Group Policy problems. 
         ......................... AXIOMSRV failed test frsevent
      Starting test: kccevent
         ......................... AXIOMSRV passed test kccevent
      Starting test: systemlog
         ......................... AXIOMSRV passed test systemlog
      Starting test: VerifyReferences
         ......................... AXIOMSRV passed test VerifyReferences
   
   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
   
   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
   
   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
   
   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
   
   Running partition tests on : axiom
      Starting test: CrossRefValidation
         ......................... axiom passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... axiom passed test CheckSDRefDom
   
   Running enterprise tests on : axiom.lan
      Starting test: Intersite
         ......................... axiom.lan passed test Intersite
      Starting test: FsmoCheck
         ......................... axiom.lan passed test FsmoCheck

When I run DCDIAG on Windows Server 2008 R2 I get the following error messages

Directory Server Diagnosis

Performing initial setup:

Trying to find home server...

Home Server = AXIOMSRV2

* Identified AD Forest.
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\AXIOMSRV2

Starting test: Connectivity

......................... AXIOMSRV2 passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\AXIOMSRV2

Starting test: Advertising

......................... AXIOMSRV2 passed test Advertising

Starting test: FrsEvent

There are warning or error events within the last 24 hours after the

SYSVOL has been shared. Failing SYSVOL replication problems may cause

Group Policy problems.
......................... AXIOMSRV2 passed test FrsEvent

Starting test: DFSREvent

......................... AXIOMSRV2 passed test DFSREvent

Starting test: SysVolCheck

......................... AXIOMSRV2 passed test SysVolCheck

Starting test: KccEvent

......................... AXIOMSRV2 passed test KccEvent

Starting test: KnowsOfRoleHolders

......................... AXIOMSRV2 passed test KnowsOfRoleHolders

Starting test: MachineAccount

......................... AXIOMSRV2 passed test MachineAccount

Starting test: NCSecDesc

Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

Replicating Directory Changes In Filtered Set
access rights for the naming context:

DC=ForestDnsZones,DC=axiom,DC=lan
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

Replicating Directory Changes In Filtered Set
access rights for the naming context:

DC=DomainDnsZones,DC=axiom,DC=lan
......................... AXIOMSRV2 failed test NCSecDesc

Starting test: NetLogons

......................... AXIOMSRV2 passed test NetLogons

Starting test: ObjectsReplicated

......................... AXIOMSRV2 passed test ObjectsReplicated

Starting test: Replications

......................... AXIOMSRV2 passed test Replications

Starting test: RidManager

......................... AXIOMSRV2 passed test RidManager

Starting test: Services

......................... AXIOMSRV2 passed test Services

Starting test: SystemLog

A warning event occurred. EventID: 0x000003F6

Time Generated: 10/25/2012 21:05:24

Event String:

Name resolution for the name dns.msftncsi.com timed out after none of the configured DNS servers responded.

A warning event occurred. EventID: 0x00000018

Time Generated: 10/25/2012 21:06:55

Event String:

Time Provider NtpClient: No valid response has been received from domain controller axiomsrv.axiom.lan after 8 attempts to contact it. This domain controller will be discarded as a time source and NtpClient will attempt to discover a new domain controller from which to synchronize. The error was: The client fails authenticating a response with a bad signature.

......................... AXIOMSRV2 passed test SystemLog

Starting test: VerifyReferences

......................... AXIOMSRV2 passed test VerifyReferences

Running partition tests on : ForestDnsZones

Starting test: CheckSDRefDom

......................... ForestDnsZones passed test CheckSDRefDom