I don't see any 192.168.1.1 anywhere in your pdf. With this kind of setup, best is to configure RRAS as NAT. Then, everything else is connected with a switch (NIC2, AD server and PCs). Have 192.168.1.1 for NIC2 address.NIC2 won't have a gateway (empty). This will most likely cause that network to be unidentified and will need a GPO setting (read the link I gave earlier).