Sidestepping managed service
I've recently taken over as technician at a secondary school. The school has a managed service agreement with the local authority, which takes care of the network infrastructure and the domain. Unfortunately, this means that I'm completely cut off from group policy management, DNS, DHCP and a host of other things that ideally I'd want access to.
The idea is that if we want a change to the system, we submit a request and receive feedback on it. This usually means no. Nothing can be installed on the domain controller or file server, either.
Because we hold all our own licenses, I've been toying with the idea of buying a new server, and creating a new domain in front of the other one. The trouble arrises when you take into account user creation, which is done by sims and fed automatically into the AD.
Is this idea feasible?