Rick Claus yes moved the FSMO back to DC1. I was in the middle of demoting DC2 after I moved the FSMO to DC3 and DC4. The print server just need rebooting since it was still authenticated against DC1. The trust relationship was fixed after the reboot.
The issue with WinRM cannot process the request, I just ran winrm qc on the new DCs then stop and start the service.
So far the only error I am getting on both DC3 and DC4 in BPA is "this domain controller must register its DNS host (A or AAAA) resource records for the domain." I have searched for this error and no luck so far for information on Windows server 2019.
Even though this resulted on both DC3 and DC4...
PS C:\Windows\System32\config> nltest /dsregdns
Flags: 0
Connection Status = 0 0x0 NERR_Success
The command completed successfully