Getting in a bit over my head here ...
We have a small office with a Windows 2003 AD domain controller. About to open a second small (remote) office, and would like both to share the same domain. They are across the Internet from each other, but an occasional VPN connection could be created.
My first thought is to setup the second office on a separate subnet. I planned to duplicate the PDC to the new office, but somehow demote it to a backup domain controller that would periodically connect to the PDC via VPN (domain changes are quite rare).
Is this just a disaster waiting to happen? Is there a better way to go about it? I've tried googling, but not quite sure what to call this mess I'm creating :)
Thanks for any suggestions.