Hyper-V Web and file server or seperate physical machine for each role

[DCUK6]

I've been asked to get a VLE up and running but I don't think its ever going to get to a point where it will have to cope with big data and with only 150 students I cant see anything ever struggling.

 

This has given me the opportunity to buy a new server however so im thinking of over specing it and using hyper-v to make it our VLE server but also replicate our other hyper-v server and also to use to backup our schools data in another virtual file server.

 

At the minute we have two servers.

One acting as a domain controller and file server and the other hosting several virtual machines with printer server, backup DC etc and also for data backups.

 

 

What im worried about is if I have the schools files and a open to the public virtual web server on the same server that I could be vulnerable to a hacker escaping the web virtual machine and accessing other virtual machines or the hyper v host HDD.

 

Obviously the public IP will be blocked to just the apaches port but not sure if this is good practise.

 

Any thoughts?

Edited April 21, 2015 by DCUK6