I solved the issue if anyone's interested:
On the W2K DC Group policy, I added the NETWORK, SERVICE, and ADMINISTRATOR accounts to GENERATE SECURITY AUDITS, LOG ON AS BATCH JOB, LOG ON AS A SERVICE, and REPLACE PROCESS LEVEL TOKEN.
Also, on the W2K3 server, right-click the FAX service, click...