Windows 2003 native mode. One domain controller on-site, read-write, no RODCs. DNS is running on the DC onsite. Servers would be pointing to the DC for DNS and authentication.
How long would the child domain remain functional without it's ability to contact the forest level domain controllers? Could users still log in, up to several weeks after the disconnect, or would they experience Kerberos authentication issues?