The network I currently manage will shortly be expanding to cover two sites, and due to the organisation of the company, I have already determined that a site-to-site hardware VPN will be implemented to link the two sites. The WAN link between the two will be between 20-100mb so no issues with bandwidth for AD/DFS etc. replication.
I will also likely be looking at installing a single Active Directory domain across both HQ and branch office, as I understand that modern day Microsoft best practices recommend steering away from multiple domains in a single forest except in exceptional circumstances.
My question is this...
If I maintain one domain across both sites (say company.com), how can I maintain a logical DNS separation between the two sites, (say for arguments sake dc1.london.company.com and dc1.birmingham.company.com)? Can this be done by structuring DNS in a certain way, without having to have a london.company.com and birmingham.company.com AD domain, one for each site?
Thank you in advance for any advice that can point me in the right direction!