Typically a simplistic setup would be a domain controller at each site with all in a single domain with site to site vpn connections.
https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/designing-the-site-topology
--please don't forget to upvote and Accept as answer if the reply is helpful--