I have a couple of branch offices (5-10 users each) connected back to HQ (AD Integrated DNS) via IPSEC tunnels. Each of these offices do not have a local AD/DNS server.
To perform lookups what would be required to be configured at the branch office and HQ?
I have setup the local DHCP to assign the primary DNS address as one of the DNS servers in HQ. Though browsing by name still fails (ping mail1). Browsing by the FQN (ping mail1.food.local) and IP Works. There are no restrictions on the IPSSEC tunnel to prevent DNS.