Multiple Sites, DCs, WAN...Your Opinion needed...

If there is no DC at the remote office, and the link goes down, then the users would not be able to logon, however they will be able to log on with "cached credentials". Basically they can logon to their PC's but will obviously have no access to other server's over the internet. They can function with local resources, such as printers on the local network, database's on the local network.
A good solution is to place at least 1 domain controller at the remote site "if it's within your budget", and this will handle all logon's. When the link goes down, the users will be able to logon fine and have access to the domain, and when the link is back up the domain will replicate with the other domain controllers.
You will need to make the domain controller at the remote site a Global Catalogue, this will handle logon requests.

This setup has many advantages eg, quicker logon time because it doesn't send the request over the internet VPN or WAN, and also it saves WAN bandwidth.

Hopes this helps

That is the way it's set up right now, so yes. If the WAN link goes down, they can't get to the internet. These are not VPN links, they are frame. All the net traffic "flows" through hub site for filterning, etc.

I'm thinking it's a waste to have this config, because a lot of those sites only have 3 users or so... So auth traffic I would imagine would be minimal...

Ah hah! Great point about software distribution. That's not something we are doing at the moment, but we will be.

Yes, I was unless there was a compelling reason to keep them.

There are rare FRS troubles... cleared up some of that when I came on here.

Thanks!