I have 2 DC's running Windows 2003 Server at Headoffice, both are Global catalog servers. I need to deploy DC's at 6 other branches where there are between 10 and 20 users. The whole organization has 180 users in total. I was thinking of deploying the dc's as additional domain controllers and not setting up child domains, what will be best practise? Also the links are not very fast ping response 40ms, should these dc's be GC servers or should I just enable Universal Group Caching? The domain controllers will also serve as file servers.
My second question how do I secure my AD in DMX, do I need to add a additional DC setup as another forest and then just create Transitive trusts? This one I'm cluesless about please help