Our main office with 85% of our users runs on a 2012 level domain. My two satellite offices run on workgroups. This was inherited and due to the nature of the work there and lack of VPN we had no reason to migrate them.
Today all three offices are linked with a site to site VPN through our SonicWalls. We are getting ready to roll out Vipre Antivirus to the users at the two satellite offices.
My choices are:
1) Set up separate domains for the two satellite offices and make them sub-domains to a parent domain at main office
2) Setup domain controllers at each location and join them to the domain at the central office
3) join satellite office laptops and desktops to the domain through the VPN.
I am leaning towards option 2 but would love to hear from anyone who has had to deal with this issue before.
thanks!