Windows Server 2008 R2 RTM
Note: You should check http://support.microsoft.com for the latest version of the different files.
List of Domain Controllers (DC’s) related hotfixes post RTM for Windows Server 2008 R2 as of August 16, 2010:
Windows Server 2008 R2 Dynamic DNS updates to BIND servers log NETLOGON event 5774 with error status 9502
Event ID 1202 logged with status 0x534 if security policy modified
TimeZoneKeyName registry entry name is corrupt on 64-bit upgrades
Occurs only on x64-based server upgrades in Dynamic DST time zones. To see if your servers are affected, click the taskbar clock. If the clock fly-out indicates a time zone problem, click the link to open the date and time control panel.
Event ID 1988 Logged in Directory Service Log after Schema Update
Some deleted objects that are nearing the tombstone lifetime may still exist on the source of a replication agreement and have an attribute added to the partial attribute set of the object that should be replicated out. If the same object was garbage-collected on the target domain controller when it was replicated, the destination domain controller logs Event ID 1988 and possibly Event ID 1388.
Windows Server 2008 R2 DNS servers that use root hints are unable to resolve some DNS queries.
Windows Server 2008 R2 domain controllers fail to authenticate DES-enabled clients.
article 978055 (http://go.microsoft.com/fwlink/?LinkId=185219)
Digest authentication fails on a Windows XP or Windows Server 2003 member server when authenticating against a Windows Server 2008 R2 domain controller
Article 978277 (http://go.microsoft.com/fwlink/?LinkId=184911 ): The specified account does not exist
You're missing DFS-related hotfixes from this list, no?