BDCs & PDC does not synch automatically

Does anyone know the root cause of BDCs & PDC not synchronizing after a new w/s is added to the domain or a user changes his password. It gives different kinds of error messages like Trust failure, access denied etc. How can this be resolved permanently?