[Blind-sysadmins] Active Directory site/domain design