Check the permission on netlogon, domain users should have read and execute.

I gave up on Windows replication long ago. What I do is wrote a simple script. It will map a drive letter to each of the netlogon directory of the various servers, copy the new files inside, then unmap the drives.