adminuw

Hi I have a unique situation here. I got two sets of pcs in the campus. One set in the lab and the other in the classroom. Network admin assigned two different sets of IPs to them and they don't want traffic between lab subnet and classroom subnet . Now, they want AD domain to manage those pcs. I don't want to have two domains( got only one physical server). I can have two sites for these two subnets.How can I have one DC in such situation when traffic is restricted? Also I will have one SCCM server running and managing these pcs. For that reason, I also need traffic. Should there be any port open? please advise. Thanks !