Re: Child Domain

Tim wrote:
> We are planning on giving students a username to access resources.
> What we are thinking of doing is setting a child domain, and devoting
> that domain to all student affairs. We have three satellite
> campuses. Just wondering how the DCs need to be set up for the child
> domain. Does each site need a DC or can the students go through the
> staff DC that is there (each site has a DC for staff)? Should I have
> two DCs in the main site for redundancy?

A domain controller can only be a domain controller for one domain. So if
you have two domains then you need a DC for each domain on each site where
you need DCs locally.

You should definately have more than one DC in a domain, but you don't need
to place them in the same physical location.

Why do you propose a child domain for the students? What is the problem
you're trying to solve here?

There is no need to have more than one domain just for the different types
of user; you can place users in their own OUs and groups for management
purposes if thats what you need.

If on the other hand you're trying to keep them seperate in order to keep
things "secure" then I would suggest thinking carefully about things; a
domain is not a security boundary, a forest is.


.

Relevant Pages

  • Child Domain
    ... We are planning on giving students a username to access resources. ... the DCs need to be set up for the child domain. ... can the students go through the staff DC that is there (each site has a DC ... Should I have two DCs in the main site for redundancy? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Child Domain
    ... all student computers log in automatically with a generic account. ... The plans are to give students a login account (better way to track ... >> What we are thinking of doing is setting a child domain, ... Just wondering how the DCs need to be set up for the child ...
    (microsoft.public.windows.server.active_directory)
  • Using existing attribute vs creating new one for student ID number
    ... I am in the planning stages of creating 1500 user accounts for ... I have decided to creat a child domain for the students so that both ... domain schema editing options were greyed out) and require additional ...
    (microsoft.public.win2000.active_directory)
  • Re: Setting up new W2K3 School Network
    ... Except for possibly encrypted data, if I can get to your domain controller, I ... Domain administrator passwords must be complex ... You also should implement an account lockout policy that has say a threshold ... You will have to decide on how to deal with those students. ...
    (microsoft.public.win2000.security)
  • Re: difference between child domain and addtional domain
    ... between child domain controller and addtional domain controller. ... Parent.com (DCs here) ...
    (microsoft.public.win2000.active_directory)