Windows Domains - 1 or 2

[GrumbleDook]

OK, this has cropped up on a few other forum over the last few weeks and few people are looking for a definitive list of pros and cons.

 

Please select your preference in the poll and then try to give as many reasons why you have answered that way.

[localzuk]

The idea of seperating the 2 draws an artificial barrier between 2 highly interlinked areas of a school. The technology exists to have a single domain, single network system whilst maintaining security.

 

I just can't see any advantages of splitting the 2 as it would then require maintenance of a seperate network and/or domain for the same outcome.

[contink]

I chose 2 networks and seperate domains simply bearing in mind that I'm in a primary and my work is focused on the curriculum side of things.

 

County want to setup the admin side of things and they know what they want and how it should be done so I let them take care of it. Given the recent propensity for blaming the other guy when something goes wrong shown by Schools ICT it makes even more sense.

 

In addition the LEA offering for Internet, filtering, etc.. is not the best, costs the earth and frustrates the end users as well as myself no end.. So, by going the 2 network route it means it's completely secure.. I can work without fear of messing up admin settings and vice versa..

 

Doubtless this isn't relevant to a secondary as you have techs on site, etc.. but for our purposes seperate is good.

[webman]

One network/domain here, simplifies everything. One login to remember, no complexities of dual-honed servers, every machine is the same - only the software packages change, easier to maintain network resources such as file sharing and printers on a single domain.

[sidewinder]

Single network single domain here, dont see the point in splitting it

I think it was at one point here, before my time but they obviously even then saw it better to just have one

 

Security wise I dont think its a problem, everything is locked down pretty tightly, and admin wise it would be a lot more work with 2 domains

[6Foot2]

Removed.

[Geoff]

Mutliple domains are fine if you're putting them all together in one over-arching forest.

[djm968]

Single network, seperate VLAN's, two domains single forest.

[Heebeejeebee]

Just finished moving from two to one. It's already made life a lot easier from our point of view.

 

HBJB

[RobC]

Simple - Single Domain/Single Network.

 

I cannot see any reason why you should have the Staff and Pupils in separate domains. It simply creates extra administration where none is required. Correct use of Group Policies, Security/Distribution Groups and ACLs should be more than sufficient to secure the network.

[beeswax]

although I work in a secondary school, one network, one domain, I have to agree with Contink regarding primary schools,

 

"I chose 2 networks and seperate domains simply bearing in mind that I'm in a primary and my work is focused on the curriculum side of things.

 

County want to setup the admin side of things and they know what they want and how it should be done so I let them take care of it. Given the recent propensity for blaming the other guy when something goes wrong shown by Schools ICT it makes even more sense."

 

Most of them just don't have the money to employ techies full time and provide the level of service you expect to see in a secondary school.

[john]

Two networks one domain for me, simple management etc, most servers now have dual NICs in them so they are built for the job.

[adent]

I chose 2 networks and seperate domains simply bearing in mind that I'm in a primary and my work is focused on the curriculum side of things.

 

 

Good point. Secondaries have more technical resources. Maybe it depends on the circumstances of the school?

[russdev]

Can I ask in this thread as just seen it what benefits in terms of non-technical aka staff accessing mis and office systems and the other way around.

 

Regards

 

Russell

[GrumbleDook]

The single network / single domain model makes life a lot easier for us at it reduces the chances of certain staff getting confused about what they can access where and when.

 

It has meant that staff have been able to find student information a lot easier (form tutors and admin staff), as well as allowing our reporting system to get off the ground (directly inputting into Assessment Manager 7 rather than by spreadsheets, etc)

[crc-ict]

Well, voted for going back to Workgroups, but my schools are still on workgroups for the curriculum side at the moment...

 

Not my fault I have to say, only been covering these schools since September and I have what I inherited with little prospect of changing things radically for now.

 

The admin side is now on domains, but seperated completely from the curriculum side - works well for us. County handle the admin stuff, so not my problem(!) and this keeps the two sides apart meaning neither one has to worry about what the other is doing!

[woody]

Single all round here! Changed from two seperate domains a few years ago and never looked back. The biggest security risk in any school is a teacher leaving themselves logged on. Now that teachers require access to sims for registration in the classroom, it makes no difference if you have one domain or two. If a teachers leaves their machine open, pupils will have easy access to admin resources whatever your domain structure! Educating users and regular shootings make up for half of our security policy here!!!