OK so this has me more stuck than any other problem i have had in a while...

Had call from admin department say they cant access the files on the server.
setup, various hyper-v servers including 2 dc's

dc1 cannot talk to dc2 unless its done by ip. if you try using unc 'logon failure the target account name is incorrect'
dc2 can talk to dc1 no issues

DC1 is RID
DC2 is PDC & info etc

dns is integrated and running on dc1 and dc2 and both can lookup each other no issues.

dcdiag on dc2 results no errors
dcdiag on dc1 throws error after error on kerberous
DCDIAG /test:CheckSecurityError on dc1 reports error cant bind ldap to dc2

anyone got any ideas
I have been working on this for the last 6 hours