+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 19
Windows Server 2008 R2 Thread, Staff and Students on the same Domain Server??? in Technical; Hi there, I currently have a setup where we have 2 separate domain servers. 1 for staff without the use ...
  1. #1

    Join Date
    Sep 2013
    Posts
    17
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Staff and Students on the same Domain Server???

    Hi there,

    I currently have a setup where we have 2 separate domain servers. 1 for staff without the use of roaming profiles and 1 for students with the use of roaming profiles.

    Just wanted to find out the standard practice across schools etc.

    Our student domain is a mess and want to build a new server but if i can securely migrate them onto the staff DC then that would be easier but not sure if it is best practice?

    Any info would be beneficial.

  2. #2
    ninjashadow's Avatar
    Join Date
    Sep 2012
    Posts
    42
    Thank Post
    32
    Thanked 3 Times in 3 Posts
    Blog Entries
    1
    Rep Power
    5
    We have 2 Domain Servers but one domain. Everyone connects to it. We have both static and roaming profiles. The staff and the students have vastly diffrent permissions. It runs smoothly.

  3. #3
    IrritableTech's Avatar
    Join Date
    Nov 2007
    Location
    West Yorkshire
    Posts
    813
    Thank Post
    88
    Thanked 179 Times in 147 Posts
    Rep Power
    66
    In my nine schools all are on a single curriculum domain. Only two of the smallest ones still have an Admin domain.

    I'm not sure there are really any benefits to having staff and students on separate domains, only more work. Assuming that is that things are secured correctly on a single domain...

  4. #4

    Join Date
    Sep 2013
    Posts
    17
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    When you say secured correctly? Do you mean by having them in separate OUs and controlling Group Permissions?

  5. #5

    Join Date
    Feb 2007
    Posts
    332
    Thank Post
    160
    Thanked 28 Times in 25 Posts
    Rep Power
    36
    We have one flat domain for all users. 3 DCs that replicate.

    IMO having 2 separate domains would be difficult to troubleshoot with no clear benefits.

    You can just configure what type of profile they have in AD anyway so this can easily be done in one domain.
    Last edited by Gardinho; 25th March 2014 at 08:04 AM.

  6. #6
    IrritableTech's Avatar
    Join Date
    Nov 2007
    Location
    West Yorkshire
    Posts
    813
    Thank Post
    88
    Thanked 179 Times in 147 Posts
    Rep Power
    66
    Quote Originally Posted by eskIT View Post
    When you say secured correctly? Do you mean by having them in separate OUs and controlling Group Permissions?
    Yep, also file and folder permissions etc. Nothing out of the ordinary, but things that need to be done right to ensure users can't access anything they shouldn't. Two domains may have been seen by some as more secure.

  7. #7

    Join Date
    Sep 2013
    Posts
    17
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    do you have your students on the same IP range as staff?

  8. #8

    Join Date
    May 2010
    Location
    Stoke on Trent
    Posts
    77
    Thank Post
    8
    Thanked 3 Times in 3 Posts
    Rep Power
    9
    Quote Originally Posted by Gardinho View Post
    We have one flat domain for all users. 3 DCs that replicate.

    IMO having 2 separate domains would be difficult to troubleshoot with no clear benefits.

    You can just configure what type of profile they have in AD anyway so this can easily be done in one domain.
    Yep, same for us. Works great.

    - - - Updated - - -

    Quote Originally Posted by Gardinho View Post
    We have one flat domain for all users. 3 DCs that replicate.

    IMO having 2 separate domains would be difficult to troubleshoot with no clear benefits.

    You can just configure what type of profile they have in AD anyway so this can easily be done in one domain.
    Yep, same for us. Works great.

  9. #9

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,698
    Thank Post
    335
    Thanked 516 Times in 484 Posts
    Rep Power
    180
    Yep again, 8 schools all on single domains. (Well one that is currently split, but being moved to 1 during easter rebuild for Win7).

    As long as permissions etc locked down there's no real downside of it nowadays. Same IP ranges (Unless big school with vlans etc), same machines, blahblah, just different settings via GPO etc

    Steve

  10. #10
    IrritableTech's Avatar
    Join Date
    Nov 2007
    Location
    West Yorkshire
    Posts
    813
    Thank Post
    88
    Thanked 179 Times in 147 Posts
    Rep Power
    66
    Quote Originally Posted by eskIT View Post
    do you have your students on the same IP range as staff?
    Yep. Our primary schools have a single flat network in most cases. At the high school we have VLANs, but they are geographical rather than user based.

  11. #11

    Join Date
    Nov 2011
    Posts
    628
    Thank Post
    87
    Thanked 21 Times in 19 Posts
    Rep Power
    10
    Five schools here, all use the same domain.

    Diferent GPO's for each site for software installs but they all use the same pupil and staff GPO's.

  12. #12

    Join Date
    Sep 2013
    Posts
    17
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Excellent....Just what i wanted to hear

    Any recommended tools for exporting users from the student domain and importing to the staff/student domain?

  13. #13
    p858snake's Avatar
    Join Date
    Dec 2008
    Location
    Queensland
    Posts
    1,490
    Thank Post
    37
    Thanked 175 Times in 151 Posts
    Blog Entries
    2
    Rep Power
    51
    Quote Originally Posted by eskIT View Post
    Excellent....Just what i wanted to hear

    Any recommended tools for exporting users from the student domain and importing to the staff/student domain?
    I would just get a export from your student management system if you can, and just bulk create new ones instead of trying to move them from the old server.

  14. #14
    hallb15's Avatar
    Join Date
    Jan 2012
    Location
    Leeds
    Posts
    407
    Thank Post
    463
    Thanked 233 Times in 151 Posts
    Rep Power
    74
    Quote Originally Posted by eskIT View Post
    Excellent....Just what i wanted to hear

    Any recommended tools for exporting users from the student domain and importing to the staff/student domain?
    You said the student domain was in a mess. Now is your chance to sort that. You can start by NOT exporting/importing student users. As @p858snake said get an export from your MIS of all students in csv format and use a Powershell script (if you're into Powershell) or one of the many other bulk add to AD tools availble. It may be more work now, but will be worth it.

  15. #15

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,821
    Thank Post
    146
    Thanked 572 Times in 516 Posts
    Rep Power
    154
    We have two domains (root for students, staff in a child), but it's purely legacy - if I was rebuilding it I'd just use one. Two work quite nicely when trusts etc are in place - they act as one for the most part here.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Using WSUS and VIPRE on the same server problems
    By DJ-Jonesy in forum Enterprise Software
    Replies: 0
    Last Post: 14th February 2013, 11:02 AM
  2. Exchange 2007 - Staff and Students on the GAL
    By FragglePete in forum How do you do....it?
    Replies: 3
    Last Post: 10th July 2009, 08:34 AM
  3. Mixing HDD and DVD on the same IDE channel.
    By laserblazer in forum Hardware
    Replies: 6
    Last Post: 24th February 2008, 11:41 AM
  4. WSUS 3.0 and Sophos on the same Server?
    By tosca925 in forum Windows
    Replies: 8
    Last Post: 7th May 2007, 09:58 PM
  5. OSX and XP on the same machine in schools.
    By drjturner in forum Mac
    Replies: 11
    Last Post: 30th June 2006, 09:53 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •