Possible to access DC in remote site via IPSec VPN?

Hello,

 Is it possible to access DC [ Windows 2008 ] in another site via IPSec VPN?

Limitations are:-

Can not add any additional DC in new site.
Can not create child domain.
Can add DNS server.

Pls suggest.