I’ve posed this question in an email to our AD administrator but I thought I would also post here in case someone else has experience with this issue.
I work in higher education. We are about to launch a campus-wide Intranet with SP13. Because of licensing issues, only faculty, staff, and student workers will be able to log onto the Intranet (until we get licensing to include students). Is there anything in AD that would differentiate a student from a student worker from faculty and staff we could use for authentication purposes?
This may be a question only our AD administrator can answer, as this may be unique to each institution, but conceptually, would the best approach be to create a custom field?
Why not just have all the staff in an AD security group, and all the students in another.
Then in SharePoint, you can either drop the relevant AD groups into your members / visitors groups, or set a web app policy along similar lines?