So here's my thought.
For a smaller organization with a virtual environment I have suggested that they do away with a second domain controller. It is easy to clone the DC (keep it small and simple) and do daily, or more often, system state backups. Smaller organizations often get into more trouble with DC synchronizing, or recovering master roles when they loose one DC.
Forum Upgrade Notice - the VMware Communities forums will be upgraded the weekend of December 12th. The forum will be in read-only mode from Friday, December 10th 6 PM PST until Sunday, December 12th 2 AM PST.