Well the problem is we need all the objects on all the sites.

What we do is create a data share for the users.
We make the global security group
Place the correct NTFS rights
Create the DFS link
Run a cacls script on the dfslink so we can use ABE.

We have the DFSroot on every DC in every Site. So we have to connect to
every DC with the cacls script.
We want to automate this whole process. This can not be done if we can´t
replicate faster then the normal interval. When the script wants to execute
the last cacls action on the dfsroot the group has not yet replicated to the
other dc´s and ABE does not work voor de users.

If we build a replication push in the script we can finish much faster.