I've been looking through the ZCM 10 documentation to find a definitive
answer but have yet to find one.

Is a Satellite server able to authenticate a device or user (AD LDAP
User source)?
From what I can piece together I'm assuming the answer is "No" due to
the data being written to the db.

If this is the case am I correct in assuming that a Satellite server
couldn't be used in an offsite DR facility if the link to its Primary
server has been severed?