If you're using 'sa', does they need to have the same passwords on both servers ?? Seems I recall that was the case replicating across domains. I'd suggest another account than 'sa' though.