I'd normally have an SP doing the search.
The parameters for the SP would be null for the search criteria not specified.
The WHERE of the SQL woulld read something like
WHERE
table.Name = (IsNull(@Name, table.Name))
AND
table.RollNumber = (IsNull(@RollNumber, table.RollNumber))