You need to ensure that the users in Site2 are authenticated by DC1 or DC2 only if DC3 is unavailable