How long will the secondary servers attempt to contact the primary server before it considers that zone is dead and stops responding to queries?
What built-in Windows feature could you have implemented to protect the sensitive information on these laptops?