Help setting up new education domain
This is my first post and I hoping that some of you can point me in the right direction as I don't quite know what the normal requirements would be for a domain in an education environment.
I have been asked to help with an upgrade for a small school. It currently has 20 computers running windows 7 home and one network printer. Each computer has the latest student edition of office installed. The network is only being used for training students on microsoft office and web applications, nothing else.
What they would like is for each computer to be upgraded to windows 7 professional and connected to their new server running 2008 r2.
I have installed the os on the server and set up the ad to have 3 main ou's, computers, students and staff. Within students I then created ou's for each intake year 2011 and 2012 at the minute.
The point I am now is group policies, mapping drives, folder redirection and roaming profiles. I have a few questions I'm hoping I can get some help with.
How tightly do you lock down the work station using gpo's?
Do you differentiate between staff and students or leave them the same and let admins have all the rights?
Does anyone use folder redirection and roaming profiles? I see the point in folder redirection for backup but if you are very restrictive on the staff and students is there much point in their profile roaming?
For backups I intend to have 2 external usb drives swapping each night, would this be acceptable?
The workstations currently have office installed, for different reasons I can't wipe these machines before connecting them to the domain. Does anyone know of any problems I might encountered once I connect them to the domain and use folder redirection?
Thanks in advance