Child Domain Lync Installation

run enable-csadforest on root domain server. Any idea to do csadforest without install Lync deployment tools on root server?

check universal security group is added on root domain.

check child domain didn't replication the universal security group.

Run Enable-CsAdDomain -Domain chil.domain.com for enable child domain user to use Lync.

Any advise?  how long time to replication the universal security group?

i will install Lync server into child domain and federation with office 365.

Thanks.