+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 24
Wireless Networks Thread, Admin/Curriculum Network in Technical; How do people do their network? Do you have a seprate domain for admin and curriclum or do you have ...
  1. #1
    pritchardavid's Avatar
    Join Date
    Sep 2009
    Location
    South Ockendon, Thurrock, United Kingdom
    Posts
    932
    Thank Post
    18
    Thanked 64 Times in 58 Posts
    Rep Power
    25

    Admin/Curriculum Network

    How do people do their network?

    Do you have a seprate domain for admin and curriclum

    or do you have everything all in one domain?


    We most likely are gonna go all virtual (Hyper-V)
    Our support company are recommending to merge them into one network

    This is what he has said on the migration steps that I asked him about, has orginally I never said anything about the admin network.

    'I was assuming that the domains to be merged, keeping them seperate was the old way of doing it. If we keep a seprate file server VM this is normally sufficient, if we grant an explicant 'deny' right for the admin data it is secure'

    We run both sims.net and sims fms for just the finince side
    and Secro Factiliy & eportal for the MIS
    I think that is right, dont really deal with the admin network alot

    So there is a few advantages for doing that, less to go wrong

    Only one print server instead of two
    Only one domain instead of two
    Only one WDS instead of two
    Only one WSUS instead of two
    Only one DNS System instead of two
    Only one DHCP System instead of two
    Only one Active Directory System instead of two
    Plus problery some others

    So what do you think?
    And what do you do?
    Last edited by pritchardavid; 3rd November 2010 at 07:37 PM.

  2. #2

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    9,932
    Thank Post
    1,339
    Thanked 1,782 Times in 1,105 Posts
    Blog Entries
    19
    Rep Power
    594
    2 things ...
    1 - I have preferred flat networks for some time. It makes little sense to say "but we are trying to protect data" if you the give access via ePortal anyway. As long as you are happy that you are taking the required steps to control sensitive data such as personnel files, etc then fine. Use this as a chance to do a data audit, make sure you know who the data owners are, get a SIRO in place, etc. Also use it to look at consolidating storage and backups.

    2 - I don't know the company who is doing this so the following isn't a reflection on them, more a question for any such company .... from the cynical part of me. Perhaps they want to do it as it will earn them more money? Something to consider. Then again, from the day I have had in Reading looking at efficiencies in ICT (blog post over the weekend or look at the Twitter hash tag #ictefficiencies) then even if it does cost more, perhaps it will pay for itself.

    Whatever you do, try to make sure you only retire kit when it is end of life ... If a server still has two years to go and you are virtualising it now, that might be a waste of money. Just a thought.

  3. #3
    pritchardavid's Avatar
    Join Date
    Sep 2009
    Location
    South Ockendon, Thurrock, United Kingdom
    Posts
    932
    Thank Post
    18
    Thanked 64 Times in 58 Posts
    Rep Power
    25
    Sort of can see what there saying

    What I thought might be a better idea

    If the vm hosts have both admin and curriculum (two ethernet cables configured to the correct vlan on the switch port)

    And IF you can select what vlan on the hyper-v manager for a VM then we could make a VM for the admin file server and configure that to admin vlan only

    And then set all other VMs to use use both vlans

    Sims is on it own pysical server like it is now
    Serco Facility is on its own pysical server like it is now
    Both connected to the admin vlan
    And maybe upgrade both servers from 2003r2 to 2008r2 (only if there comptable with them, or 2008 if not compatiable with 2008r2)


    Does that sound like that would work?
    Would you say that would be better than their idea?
    Last edited by pritchardavid; 3rd November 2010 at 07:20 PM.

  4. #4
    clareq's Avatar
    Join Date
    Dec 2005
    Location
    Doncaster
    Posts
    707
    Thank Post
    53
    Thanked 188 Times in 124 Posts
    Rep Power
    101
    We merged both networks years ago, as it became harder to identify whether a person required an admin or a curriculum machine - so many users have a foot in both camps - teachers take registers and write reports in SIMS, and need to use curriculum software to plan lessons. Do you give them 2 machines, or insist they log off one machine and onto another to do a different job? File permissions keep data secure.

  5. Thanks to clareq from:

    sven (10th March 2011)

  6. #5

    elsiegee40's Avatar
    Join Date
    Jan 2007
    Location
    Kent
    Posts
    10,786
    Thank Post
    1,789
    Thanked 2,180 Times in 1,615 Posts
    Rep Power
    771
    I admit I have a much smaller network than most of you, but admin and curriculum are on the same domain.

    At my last (state) school, they were separate only because Kent's EIS that were responsible for SIMS flatly refused to let SIMS be installed anywhere other than on its own domain. It was a pain!

  7. #6


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,588
    Thank Post
    228
    Thanked 856 Times in 735 Posts
    Rep Power
    296
    were beginning to merge them as most admin networks are a server and 2-3 workstations. it seems silly too have a domain and all the related roles for 4 computers. We now tend to run the admin server as a vm that is a file store for admin suers and sims server. Its not a dc anymore has no other sql datacabses for wsus/sophos etc just has 2 nics (due to lea requiring admin server to have ip of 10.even.x.100 to send data to them) much simpler setup and the sims server isnt used as a workstation etc so is a simple machine less to go wrong

  8. #7


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    339
    one domain, different vlans. best of both.

  9. #8

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,133
    Thank Post
    1,373
    Thanked 2,377 Times in 1,674 Posts
    Rep Power
    703
    Dorset (bless) still advocate separate domains - although being part-time it means I dont have to worry about issues on the admin network which are generally more urgent than on the curriculum side. However, they are now sorting out a trust -with firewall - so that teachers can see SIMS and eventually we can sort the data out for the parental engagement bit of the VLE.

  10. #9

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,212 Times in 761 Posts
    Rep Power
    394
    I've always been in favour of a single domain.

    My feeling is that a split system is really only done in cases where whoever looks after the admin side doesn't trust whoever looks after the curriculum side to deliver a secure network. If the security is set up by somneone with even half a clue, there is NO security problem with having a combined network.

    The only schools I've worked in that had separate networks were those where the LA looked after the admin network in its entirety. You're looking after both, and you've already identified some serious benefits in your first post: really I wouldn't be thinking "why have a single domain", but "why NOT have a single domain".
    Last edited by AngryTechnician; 3rd November 2010 at 08:17 PM.

  11. #10
    pooley's Avatar
    Join Date
    Sep 2005
    Location
    S Wales
    Posts
    1,130
    Thank Post
    78
    Thanked 118 Times in 99 Posts
    Rep Power
    67
    Admin & Curriculum are separate here, dictated by LA. I'm hoping to "flatten" within the next year and have once nice domain.

  12. #11
    pritchardavid's Avatar
    Join Date
    Sep 2009
    Location
    South Ockendon, Thurrock, United Kingdom
    Posts
    932
    Thank Post
    18
    Thanked 64 Times in 58 Posts
    Rep Power
    25
    Liking the idea of one domain then! I'll speak to the boss about this tomorrow then, plus need to speek to him about our support company quote for migration



    ok another few questions here

    Has I said I dont know much about the admin network


    Sims FMS - Is that an addon to sims or older version of sims, im a bit confussed, heard my supervisor talk about it before to someone, makes my think its a seprate product or something




    If we would do to this im gonna suggest upgrading the servers os to a newer version can you tell me what supports what and also the sql version

    Sims.net support upto Server 2008R2?
    Sims.net support SQL 2008R2?

    Sims FMS support Server 2008R2
    Sims FMS support SQL 200R2?

    Serco Factility support Server 2008R2?
    Serco Facitlity sypport SQL 2008R2?

  13. #12
    Steven_Cleaver's Avatar
    Join Date
    Jul 2008
    Location
    Birmingham
    Posts
    463
    Thank Post
    174
    Thanked 84 Times in 68 Posts
    Rep Power
    50
    I have worked on both and found that as long as you secure everyting correctly a single Domain is much easier to manage, in fact one of the first things I was asked at my interview for my present position was wether I prefered single or split as they had Admin/Curriculum on seperate Domains and wanted to move these together. To be honest we Virtualised the Curriculum Network first and put in a better backup solution. Then it wasn't to difficult to add in the Admin Systems and P to V the admin Server and move over the admin workstations onto the Curriculum Domain.We did this with some support from an external company as we wanted to do this pretty quickly and support the Admin side more as previously this had been done by the LEA although this was done pretty well we were just trying to bring as much as possible in house.

  14. #13
    Butuz's Avatar
    Join Date
    Feb 2007
    Location
    Wales, UK
    Posts
    1,579
    Thank Post
    211
    Thanked 220 Times in 176 Posts
    Rep Power
    63
    Well here my Admin Network is actually part of the LEA network so I am limited in what they will allow. Therefore we had to keep a separate admin and curriculum domain. However I have Virtualised both the Network Infrastructure (Procurve VLANs) and the Server Infrastructure (VMWare) for both curriculum and admin domains.

    This means I can keep both networks virtually separate (and keep the LEA Happy) whilst actually saving money by collapsing them both onto one physical network and server set up. Money is saved by:
    a) reducing the number of switches used (from 30 to 20) thus bringing replacement and electricity costs down
    b) reducing the number of servers used
    c) being able to tag any network drop as either admin or curriculum - whereas before with the physically separate infrastructures I often had to get new network runs put in just for admin drops so money saved there too.

    It works well. I can change any network drop in the school to curriculum or an admin and I can give any server admin or curriculum network access simply at a few clicks of the mouse.

    Ideally everything would be on one domain but with very tight security - but the LEA won't allow that.

    Butuz

  15. Thanks to Butuz from:

    soapyfish (16th February 2011)

  16. #14
    jsnetman's Avatar
    Join Date
    Oct 2007
    Posts
    887
    Thank Post
    23
    Thanked 134 Times in 126 Posts
    Rep Power
    39
    Merged our admin network into the curriculum summertime, easier to manage, easier for users. Admin network formerly under LEA control but they were pushing for schools to merge them to curriculum as we are all going trust status, sorry we already have gone trust and most schools to follow up here.

  17. #15
    bio
    bio is offline
    bio's Avatar
    Join Date
    Apr 2008
    Location
    netherlands
    Posts
    520
    Thank Post
    16
    Thanked 130 Times in 102 Posts
    Rep Power
    37
    Quote Originally Posted by CyberNerd View Post
    one domain, different vlans. best of both.
    same here

    bio

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Domain Admin cannot perform functions as local admin
    By KWestos in forum Thin Client and Virtual Machines
    Replies: 3
    Last Post: 30th September 2009, 09:58 PM
  2. Merging Admin and Curriculum 2003 Domains
    By pjm1974 in forum Wireless Networks
    Replies: 11
    Last Post: 6th August 2008, 11:08 AM
  3. Replies: 3
    Last Post: 19th February 2008, 10:13 PM
  4. Admin and Curriculum separate or merged?
    By rusty155 in forum Wireless Networks
    Replies: 26
    Last Post: 18th July 2006, 03:11 PM
  5. Admin and Curriculum networks seperate?
    By woody in forum Wireless Networks
    Replies: 49
    Last Post: 2nd December 2005, 10:43 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •