I have 2 domains: corp and lab. vCenter is intsalled in the lab zone. There is one-way trust, so I can use corp account with my lab vCenter.
Recently I've moved whole lab zone to remote location with VPN between sites. And I've got a problem - if something happens to connection between domain controllers - all the corp\ permissions are gone from lab vCenter.
I think additional corp RODC located in the lab location can be workaround, but is it really the only solution?