Best practice for AD

[JasonMeyer]

I have a pre-existing AD domain that contains all the staff for a school
district. We would like to use AD for logins of students on PCs at our high
school for. I think an OU could work but I don't want the students to have
the abilities to browse the network. I know I can disable that via GPO but I
may want some other difference for password usage, and to join the student
computers to that domain, so I am thinking of creating a seperate child
domain as it gives me a little more flexibility in securing things a little
differently than my staff domain. Any advice on how other k12 instructional
institutions have done this sort of thing would be appreciated.

Jason

 

[Cary Shultz [A.D. MVP]]

Jason,

While I have never worked for a school district, I would suggest that a
child domain would be the better choice -IF- you want a separate password
policy for the high school students. Otherwise, I might go with the idea
that you suggested ( a separate OU ).

HTH,

Cary