Can I add a W12k server as a member to more than one domain?

[talksr]

Hi,

 

I have a server I would like to use for AV and Sophos EC (provided by LGFL). The school in question has two physical networks, an admin (for office staff) and a curriculum one. As such, there are two separate servers with two separate domains, DHCP etc.

 

I would like to run a dual NIC server in the middle which can provide AV protection, Backup via BE15 and WSUS.

I have the server with quad NIC, the BE licences, Sophos EC, just not sure if I can connect as a member to two domains?

 

I am guessing not as if it was possible, I would already know.

[sted]

I don't think any ms os can join more than one domain though you can cheat and allow credentials from one domain to work in another using domain trusts

[3s-gtech]

If you give the server a physical link between the two networks, it can in theory dish out and manage Sophos on both. The different ranges etc may cause some craziness - honestly, you really don't need to physically separate staff and student domains any more, it's archaic and makes the job so much harder! The server cannot be a member of both domains at once.

 

I haven't tried this without a trust in place between the two domains, and my server just had the one IP address which was visible from both ranges.

[talksr]

If you give the server a physical link between the two networks, it can in theory dish out and manage Sophos on both. The different ranges etc may cause some craziness - honestly, you really don't need to physically separate staff and student domains any more, it's archaic and makes the job so much harder! The server cannot be a member of both domains at once.

 

I haven't tried this without a trust in place between the two domains, and my server just had the one IP address which was visible from both ranges.

 

It is not so much a separation of student and staff networks as curriculum and admin.

We have never really had any issues and it has actually worked to our benefit such as the numerous times teachers have created loops on the network. It completely shuts down the curriculum network, meanwhile the admin (office staff, head teacher etc) are able to continue on with their work with no effect on them. This obviously works vice versa and is extremely useful in connecting to the servers as if one network is down, you can communicate with the servers via the other one.

 

I am sure once we upgrade our network and get proper layer three switches, loops and the like will be a thing of the past, but it has not been all trouble and problems.

[Oaktech]

As a middle ground between now and a new network you could look into a domain trust between the two domains.

 

What switches are you currently running, because almost everything with webpage management has spanning tree on it these days.

[cpjitservices]

It is not so much a separation of student and staff networks as curriculum and admin.

We have never really had any issues and it has actually worked to our benefit such as the numerous times teachers have created loops on the network. It completely shuts down the curriculum network, meanwhile the admin (office staff, head teacher etc) are able to continue on with their work with no effect on them. This obviously works vice versa and is extremely useful in connecting to the servers as if one network is down, you can communicate with the servers via the other one.

 

I am sure once we upgrade our network and get proper layer three switches, loops and the like will be a thing of the past, but it has not been all trouble and problems.

 

So you must have the networks physically separated too then ? separate switches and internet connection ?

 

I say this because, it doesn't matter where the loop occurs it can affect an entire network.