I am looking for a method where we can build AD DC's when they are not connected to the AD Forest/Domain. We have a vendor who builds a bunch of servers (VBlock) which needs AD to be installed first. Hence we want the vendor to securely install a copy of our AD and then install all other servers which are dependent on the AD in their premises and ship it to our datacenter. So once these servers come into our datacenter and we plug them in , we have everything replicated out.
Is there a secure way of doing this? May be Clone in Windows Server 2012?
Would there be any issues doing domain joins to this offline built DC at vendor premises?
Currently, our issue is that every vBlock that is shipped is shipped with a Separate AD Forest pre-built, hence we now have islands of AD Forests and its is getting difficult to manage them. Hence the query.