+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 19
Windows Server 2008 R2 Thread, Staff and Students on the same Domain Server??? in Technical; Hi there, I currently have a setup where we have 2 separate domain servers. 1 for staff without the use ...
  1. #1

    Join Date
    Sep 2013
    Posts
    17
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Staff and Students on the same Domain Server???

    Hi there,

    I currently have a setup where we have 2 separate domain servers. 1 for staff without the use of roaming profiles and 1 for students with the use of roaming profiles.

    Just wanted to find out the standard practice across schools etc.

    Our student domain is a mess and want to build a new server but if i can securely migrate them onto the staff DC then that would be easier but not sure if it is best practice?

    Any info would be beneficial.

  2. #2
    ninjashadow's Avatar
    Join Date
    Sep 2012
    Posts
    44
    Thank Post
    36
    Thanked 3 Times in 3 Posts
    Blog Entries
    1
    Rep Power
    5
    We have 2 Domain Servers but one domain. Everyone connects to it. We have both static and roaming profiles. The staff and the students have vastly diffrent permissions. It runs smoothly.

  3. #3
    IrritableTech's Avatar
    Join Date
    Nov 2007
    Location
    West Yorkshire
    Posts
    982
    Thank Post
    130
    Thanked 229 Times in 183 Posts
    Rep Power
    75
    In my nine schools all are on a single curriculum domain. Only two of the smallest ones still have an Admin domain.

    I'm not sure there are really any benefits to having staff and students on separate domains, only more work. Assuming that is that things are secured correctly on a single domain...

  4. #4

    Join Date
    Sep 2013
    Posts
    17
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    When you say secured correctly? Do you mean by having them in separate OUs and controlling Group Permissions?

  5. #5

    Join Date
    Feb 2007
    Posts
    363
    Thank Post
    174
    Thanked 38 Times in 34 Posts
    Rep Power
    40
    We have one flat domain for all users. 3 DCs that replicate.

    IMO having 2 separate domains would be difficult to troubleshoot with no clear benefits.

    You can just configure what type of profile they have in AD anyway so this can easily be done in one domain.
    Last edited by Gardinho; 25th March 2014 at 09:04 AM.

  6. #6
    IrritableTech's Avatar
    Join Date
    Nov 2007
    Location
    West Yorkshire
    Posts
    982
    Thank Post
    130
    Thanked 229 Times in 183 Posts
    Rep Power
    75
    Quote Originally Posted by eskIT View Post
    When you say secured correctly? Do you mean by having them in separate OUs and controlling Group Permissions?
    Yep, also file and folder permissions etc. Nothing out of the ordinary, but things that need to be done right to ensure users can't access anything they shouldn't. Two domains may have been seen by some as more secure.

  7. #7

    Join Date
    Sep 2013
    Posts
    17
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    do you have your students on the same IP range as staff?

  8. #8

    Join Date
    May 2010
    Location
    Stoke on Trent
    Posts
    91
    Thank Post
    10
    Thanked 4 Times in 4 Posts
    Rep Power
    10
    Quote Originally Posted by Gardinho View Post
    We have one flat domain for all users. 3 DCs that replicate.

    IMO having 2 separate domains would be difficult to troubleshoot with no clear benefits.

    You can just configure what type of profile they have in AD anyway so this can easily be done in one domain.
    Yep, same for us. Works great.

    - - - Updated - - -

    Quote Originally Posted by Gardinho View Post
    We have one flat domain for all users. 3 DCs that replicate.

    IMO having 2 separate domains would be difficult to troubleshoot with no clear benefits.

    You can just configure what type of profile they have in AD anyway so this can easily be done in one domain.
    Yep, same for us. Works great.

  9. #9

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,824
    Thank Post
    372
    Thanked 544 Times in 507 Posts
    Rep Power
    184
    Yep again, 8 schools all on single domains. (Well one that is currently split, but being moved to 1 during easter rebuild for Win7).

    As long as permissions etc locked down there's no real downside of it nowadays. Same IP ranges (Unless big school with vlans etc), same machines, blahblah, just different settings via GPO etc

    Steve

  10. #10
    IrritableTech's Avatar
    Join Date
    Nov 2007
    Location
    West Yorkshire
    Posts
    982
    Thank Post
    130
    Thanked 229 Times in 183 Posts
    Rep Power
    75
    Quote Originally Posted by eskIT View Post
    do you have your students on the same IP range as staff?
    Yep. Our primary schools have a single flat network in most cases. At the high school we have VLANs, but they are geographical rather than user based.

  11. #11

    Join Date
    Nov 2011
    Posts
    628
    Thank Post
    87
    Thanked 21 Times in 19 Posts
    Rep Power
    11
    Five schools here, all use the same domain.

    Diferent GPO's for each site for software installs but they all use the same pupil and staff GPO's.

  12. #12

    Join Date
    Sep 2013
    Posts
    17
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Excellent....Just what i wanted to hear

    Any recommended tools for exporting users from the student domain and importing to the staff/student domain?

  13. #13
    p858snake's Avatar
    Join Date
    Dec 2008
    Location
    Queensland
    Posts
    1,491
    Thank Post
    37
    Thanked 175 Times in 151 Posts
    Blog Entries
    2
    Rep Power
    52
    Quote Originally Posted by eskIT View Post
    Excellent....Just what i wanted to hear

    Any recommended tools for exporting users from the student domain and importing to the staff/student domain?
    I would just get a export from your student management system if you can, and just bulk create new ones instead of trying to move them from the old server.

  14. #14
    hallb15's Avatar
    Join Date
    Jan 2012
    Location
    Leeds
    Posts
    618
    Thank Post
    666
    Thanked 351 Times in 235 Posts
    Rep Power
    95
    Quote Originally Posted by eskIT View Post
    Excellent....Just what i wanted to hear

    Any recommended tools for exporting users from the student domain and importing to the staff/student domain?
    You said the student domain was in a mess. Now is your chance to sort that. You can start by NOT exporting/importing student users. As @p858snake said get an export from your MIS of all students in csv format and use a Powershell script (if you're into Powershell) or one of the many other bulk add to AD tools availble. It may be more work now, but will be worth it.

  15. #15

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    3,104
    Thank Post
    161
    Thanked 655 Times in 588 Posts
    Rep Power
    169
    We have two domains (root for students, staff in a child), but it's purely legacy - if I was rebuilding it I'd just use one. Two work quite nicely when trusts etc are in place - they act as one for the most part here.



SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Using WSUS and VIPRE on the same server problems
    By DJ-Jonesy in forum Enterprise Software
    Replies: 0
    Last Post: 14th February 2013, 12:02 PM
  2. Exchange 2007 - Staff and Students on the GAL
    By FragglePete in forum How do you do....it?
    Replies: 3
    Last Post: 10th July 2009, 09:34 AM
  3. Mixing HDD and DVD on the same IDE channel.
    By laserblazer in forum Hardware
    Replies: 6
    Last Post: 24th February 2008, 12:41 PM
  4. WSUS 3.0 and Sophos on the same Server?
    By tosca925 in forum Windows
    Replies: 8
    Last Post: 7th May 2007, 10:58 PM
  5. OSX and XP on the same machine in schools.
    By drjturner in forum Mac
    Replies: 11
    Last Post: 30th June 2006, 10:53 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •