I am in the US, I have a replicate domain controller in Colombia that connects to here via a site-to-site vpn connection for replication. I have only 1 user that uses that DC to authenticate. It is also the DNS server. It is on a different subnet as well.
I have remote access to it. What I need to do is log in remotely and decommission it so they can send it back to me. However I need to make sure they will be able to log in to their computer since the DC they use to authenticate won't be there. I just want him connecting to VPN to access his usual resources (mostly exchange).
I know how to log in and decommission it, but how will I tell the single users laptop there to no longer authenticate on that DC and to just use a VPN connection?