If your network doesn’t allow you to reach the DC required (NLOS), or you need to sync users, group, passwords or sidHistory through an intermediary or indirect server in the DMZ for example, then you can use PowerSyncPro Directory Synchronisation to do this.
You can even sync objects over the internet. Often we find in a company divesture this is also useful so that the remote agent can be installed with minimum privileges too.