We have 12 remote offices on our WAN. Each remote office has a single server with about 12-20 PCs and 5 printers. Most of the servers are RODCs with DNS, File and Print services. In addition, we have the PDC, 2 DCs and one RODC at our HQ office. Finally, there are 4 DCs on the Exchange edge for cloud based Exchange services.
My question is, (even though it doesn't happen often) when any of the RODC server offices WAN link goes down, the users are unable to log into their PCs until the WAN link is restored. Is it better to make the RODCs into full DC? Is there an upper limit (best practices) of DCs in a given Domain?
We have setup "Allowed RODC Password Replication" groups for each remote server, but that doesn't seem to work, ergo this forum question.