I can think of at least one school in Yorks that has it as well Tom it was discussed at the last meeting! Blasted schools being complex hey lol
We are a single domain, however I am looking at starting again as my redecessor configured it all wrong - its all correct now but we have since changed names so I think with a new domain name I will look at setting up VLANS for each segment of the network (Learners, Staff, IT, WiFi) for example.
And ironically, after all the logistical mayhem we started having because staff were crossing over so much between the 2 domains and because SIMS was being more thoroughly introduced in to the curriculum, we ended up merging the 2 anyway! Best thing we've done so far though, it's made life a lot easier.
Having said that though, it was great working and testing the multiple domain stuff with the Smoothwall folk! :)
Single Domain, Parent, Child if essential.
If you have concerns over security of data or MIS use then familiarise yourself with PCI Compliance, keeping your users payment card data away from other users is about as tough as it gets and all of the principles are the same, mostly common sense and good practise resulting with VLANs and good passwords!
Directory Services all but eliminated the need for this kind of thing in 1999/2000 we have all moved on since then.