Thanks, it worked! And thanks for the firewall tip. I was going to get to that problem next. Now my secondary is updating and I don't have any fails in the DNS report.