You need to modify the SRV records to ensure that DC2 is contacted for authentication only when DC1 is unavailable