I manage the network for a pretty small company (~60) users. We have a remote site of about 5 users that are connected via a T1. These computers are on the same subnet as the main office. The routers connected the T1 are configured as transparent bridges. Users at the remote site are experiencing really long waits for most applications. i.e. printing, mail, authenticating users, etc. I want to deploy an additional 2003 Server DC at the remote site. It will server as a print server for the printers at the remote location, as well as serve as the domain controller for the remote users. My question is, how do I force only those users at the remote site to authenticate against this new DC/Print server, and not traverse the WAN to authenticate against the DC in the main office? Can this be done without putting the remote office on a different subnet? Can I specify at what time during the day these 2 DCs replicate with each other? I would rather them replicate at midnight, so they arent constantly putting data over the WAN link during the day. Thanks for any info you can give me.