HowTO: create an additional domain controller in an existing forest