AD between branch?

Question

Active Directory

There is a head office, there are branches, between them VPN site to site, Internet channel width from 4 Mbps to 20 Mbps. What is the best way to make a common AD between them? I tend to raise a subdomain for each branch, how it will affect the speed of user authorization, the security of this option, everything is done so that users from the head office can log in with a single account

Answer 1

In the main office we raise the domain, and in the branches Read-only domain controllers (RODCs)