The project I´m working on needs to auth its users against AD, and as a fallback check against its own user base. Now I need to test it outside the production environment.
You should think about multi-domain and multi-forest environments, as well as just having multiple domain controllers in the domain you're authenticating against. You're going to need more than a single VM to do that.