Re: "we will never be able to avoid outages entirely"
You only have one backup DC?
Given the fact that AD comes included there's little practical reason not to have a VM on every physical server serving as a DC. If the physical server itself isn't the DC.