New domain name

[exonetsystems]

Hi all,

 

We're replacing our server imminently, and whilst looking around on the net making sure we have all bases covered (not leaving anything to chance), I came across a few articles explaining that you shouldn't use .local in a domain name. There wasn't any solid evidence to suggest it's 'wrong', just not best practice apparently. Whenever I've personally built DC for school, I usually go for the school's website but with .local on the end (..sch.local). Now I'm rethinking this and wondering if something like internal...sch.uk would be better.

 

How does everyone else do it?

 

Thanks in advance!

[DSapseid]

.local causes issues with apple devices.

[sted]

if im starting from scratch now id be using a propper domain name that way if i ever want azure/remote desktop or other external stuff working ts easier as the domain name is the same on and off site. So the one we did over the summer is ad.shortenedversionofschoolname.co.uk. So bought the shortenedversionofschoolname.co.uk domain and can route external to internal easily and if you need certs for anything .local/.internal are now not allowed to be bought i believe. Just maek sure you dont use your actual school domain name that your email/website is is but a subdomain of that should be fine

[sparkeh]

.local causes issues with apple devices.

That's been resolved though right? We have .local domain with plenty of Apple devices and no issues.

 

https://support.apple.com/en-gb/HT201275

https://support.apple.com/en-gb/HT204684

[Oaktech]

Using the full domain name has a host of benefits: Tighter, easier integration with exchange, office365 and azure. SSO is also more self explanatory when staff are used to just logging in everywhere with their email address, plus you only need to purchase 1 wildcard certificate to secure everything!

[sparkeh]

Using the full domain name has a host of benefits: Tighter, easier integration with exchange, office365 and azure. SSO is also more self explanatory when staff are used to just logging in everywhere with their email address, plus you only need to purchase 1 wildcard certificate to secure everything!

Just to be clear I wasn't advocating using .local, I got landed with one and just wanted to clarify that Apple devices are ok with it now.

[localzuk]

Best practice is to use a subdomain of a real domain. Eg "corp.school.area.sch.uk". It means that a) you own the domain, and b) no-one else could use the domain.

 

It simplifies various internal/external DNS issues also.

[Sagima]

We use a proper domain internally

[exonetsystems]

Thank you all for your help and replies, glad I got that one cleared up!