Admin & Curric networks -a different spin on the old problem

[eean]

Thanks for all your comments so far.

I think Contink's idea is sort of what I was getting at in my original post - basically to give teachers a curric (day to day) password and an admin (secure data) password.

However, what I'm thinking is to log on as a curric user then map a drive to to the admin network (requiring the user to enter their ADMIN password because the curriculum user won't have access) when, and only when, they need enhanced access. I could probably make a script that will introduce a screensaver time out etc...

So: what's the best way to achieve this?

- Simply, have 2 domains, same IP range.

or

- VPN? - probably a bit overkill?

Are there any other problems you can think of with this model?

[eean]

Thanks for all your comments so far.

I think Contink's idea is sort of what I was getting at in my original post - basically to give teachers a curric (day to day) password and an admin (secure data) password.

However, what I'm thinking is to log on as a curric user then map a drive to to the admin network (requiring the user to enter their ADMIN password because the curriculum user won't have access) when, and only when, they need enhanced access. I could probably make a script that will introduce a screensaver time out etc...

So: what's the best way to achieve this?

- Simply, have 2 domains, same IP range.

or

- VPN? - probably a bit overkill?

Are there any other problems you can think of with this model?