Thanks guys - am enjoying the feedback

Currently the Mac labs are bound to OD and AD, as well as the OD server (X server) being bound to AD. Search path for iMacs (clients) is AD then OD.

Authentication, mapping and user storage is done via windows services, using applescript to do most of the mapping of network drives. Running to two environments side by side is essentially the current situation, except I have had too many inconsistencies with OD/workgroup manager and the policies they are meant to apply/restrict access to preferences etc. It is very flaky.

Besides that the X Server has no function, and due to the nature of the workgroup manager "policies" if the server were to crash tomorrow or be unplugged there would be zero impact.

CTO