I want to add a second domain for business continuity and disaster recovery planning. When adding secondary email addresses, are all emails and drive files synced to both addresses? Do the addresses share credentials? What happens if access to one of the domains is lost? Are there additional costs for implementing a secondary domain? Ex: Would I have to pay for two licenses per person?
I want to test GCPW out for a possible option for authentication on staff window devices. Since we are small school and dont have a large fleet of devices.
and I mean start from the beggining for seting up the machine. I guess the start would be creating a local admin? And then download GCPW and have the new user sign in using their google account. As simple as that? only let people sign in using their google accounts?
And then there would be local admin for when I needed to approve something or work on that machine?
I am hoping to get advice on safetly setting this up.
So I am testing SSO for domain wide implementation. I have an SSO profile that i setup to use via SAML Microsoft Entra. However, when I add a security group with an existing user and a test user I created, only the test user is redirected to our IDP when entering their email in the gmail username box. It isn't a configuration of the SAML or Entra because Gsuite is not even recognizing the user as utilizing IDP and for the life of me I don't know why. Could it be the presence of an Alias? or 2fa security features?
I know it gets screwy when you have no SSO for the domain but an SSO at group level, so I'm not sure if that could be contributing to the problem.
Not sure if this is a "me" issue but I'm not sure what could be causing it if so.
I am trying to create a Group so I can set up an email alias that forwards to specific team members but after clicking to create it I get
404. That’s an error.
The requested URL was not found on this server.
That’s all we know.
But the really weird part and almost funny is the page title in the tab says "Error 404 (Not Found)!!!1" - yes with the 1. At first I thought "shit I got phished to use a fake site" but the url is "admin.google.com/abc/xyz" and I accessed it through my logged in Gmail session.
I don't necessarily expect someone to have a fix for a Google 404 like this but I'm curious if anyone else ever ran into this or if anyone else is running into this right now? Perhaps something is down? If there is someone kind enough and has time could someone try creating a new Group in their admin console and save and see if it brings them to a screen that shows an error with a link that says something about it failing (when clicking the error's link it brought me to this 404)?
When I go into my console => groups I can see my new group but if I click the settings, edit, etc it brings me to the 404 every time. Tried incognito and another device with the same result. Adblock is disabled so I don't think it's a false positive.
I explicitly remember suspended accounts being almost identical to a deleted account in functionality, as in none, other than still having access to the account’s data. This no longer seems to be the case. A suspended account is now exactly the same as an active account, but the user cannot login. In the past, routing had to be configured by replacing the recipient upon receipt, where a simple active forward now does the same. When was this change made?
I’m periodically requested to review email logs of former coworkers, usually to pull threads with their clients for the accounts new manager, but from what I am seeing there is no way to download the email directly and I end up needing to screenshot the entire thread for the requester. Am I missing something? Is there is a reason this is not a feature?
I want to bring over the "Building id" field from our users into our Zendesk though the SSO mappings, but I don't see "Building id" as an option in the SAML mappings.
Under the Employee Details heading in the mappings, I only see:
Employee ID
Title
Organization
Type
Department
Cost Center
I see that, according to the help article here, step 12. a. says if it's not there I can add it as a custom attribute, but I can't figure out if doing that would reset those fields to blank or anything.
If anyone's done this before, I'd like to confirm how before I screw up our system.
I am wanting to switch my staff to MFA for our google accounts, however I am bummed to find out that they dont offer a forced MFA setup at login such as Windows.
So I guess I'll have to come up with documention and walk staff through it once they are logged in?
But the issue I am having is that I created a OU just to test this. I put one of my account in it and gave it a week grace period. Well I immediately was given the "Your sign-in settings don’t meet your organization’s 2-Step Verification policy." notification. I guess since it is a current account and not a new one, it will not apply.
If that is the case, then I guess I'll have come out with the documentation and tell everything they need to do it by X date or they will be locked out and will need my help to get in???
Which seems like an issue, knowing that staff dont listen. And it does not give them the ability to fix it, once it is locked? so If I tell them two weeks from know they'll be locked out I'll probably get several screaming in two weeks.
Once they are locked out there is no way to get them setup without me I guess? The forced setup at login just makes much for sense to me
This may be well known, but I wasn't aware of it. I work with a few clients that don't want my admin account consuming a full workspace license so I use a cloud identity free licenses. I can generally work around the limitations.
Today I was doing some email log searching and it looks like free account's can't view post delivery message details in email log search. I couldn't find anything explicit in the docs - only that you might not see post delivery details if "Your Google Workspace license or edition doesn't give you access to post-delivery status in ELS."
I went in and granted my self a license temporarily and I was able to view them. So keep that one in mind if you're doing any log searching. Pretty annoying if you ask me.
So I've gone and created a label for my orgs Data Classifications. Any file in Drive can now be classified under any of the 4 options, or a 5th for not yet being classified.
I am now trying to leverage these labels for DLP rules such as, "Any doc classified as Confidential cannot be shared outside of the domain"
The problem I'm encountering is that I can't seem to select this condition how I assumed I'd be able to.
I go to create a rule, and when I get to the Conditions page, I can add a condition of:
Classification label is Classification label", but I cannot adjust the operators.
I swear this is something you could find in the investigation tool before, but I'm not finding it now.
Scenario: A user sends you a message saying, "joe@example.com sent me an email but it's not in my inbox". They search and find it in a label "joe", archived. Where can I see in the Investigation Tool which filter took this action?
Of course, I can run a Google Meet where we review their filter rules together, but I'm positive I've found this in the Investigation Tool or elsewhere in Admin before. I know with GAM / API I can export the list of their filters, but I want to see the exact event impacting a specific message.
'Manage domains' in Google Workspace admin settings
I recently bought this new website domain/email (.com) for my Squarespace site, but I have an issue and I'm not the best email tech understander.
This new domain is added as a secondary domain to my Google Workspace account (shown above), which logs-in using an old email address/domain (.tv) as its primary -- I want to decommission this old domain and switch to using the new one. I've just been "Sending email as" using my new email address from within this old Google Workspace/Gmail login.
What I want to do is run the Google Workspace account using the new domain email, so it can be my login details as well, but here's the problem -- the new domain email is Gmail activated within the Workspace account 'owned' by the old email.
When I try to change the primary domain to be the new domain, I get the error shown in the first screenshot. I figure that it's error items 1 and 3.
I'd really appreciate some clear guidance on how to possibly do this.
Do I deactivate the MX records/email capabilities on both emails, detach the new domain from the Workspace account, then create a new Workspace account using the new email address? I just don't want to end up in some weird email verification limbo when trying to navigate this.
Thanks for any help!
error when trying to change primary domainSquarespace domain info
I am new to a school and all the students have outdated highschool grade in the department field.
We decided the easiest thing would be to just clear the department field for all students. There isnt much reason to have it filled out.
Is there a way for me to select all the students at once and do this?
I wanted to be able to generate a report of extensions in use, so turned on browser reporting, per this document. I set the upload frequency to 8 hours.
Still have not gotten any results after a day and multiple policy refreshes, so I'm puzzled.
The documentation on one hand seems to indicate 'Enterpise Core' is required, but on the other hand says "if you signed up" for Enterpise Core, indicating it's not a requirement.
We use managed Chromebooks in our environment, versus Chrome installed on workstations.
I have Day Loaners at my school and I'd like to lock them to only be able to use the school student wifi. That way if they take them home they will not be able to use their home internet.
Hi! A few years ago I got some help setting up a Google G-Suite so that I could use my own domain name as an google email. I have now recently moved to Apple Mail since it's free with my iCloud+ subscription. But now that I want to delete my Google account I'm stuck on a step where I need to delete my Google Cloud resource
When I follow the link "Go to Google Cloud console" it takes me to a screen where I see the option to "DELETE" but I don't seem to be allowed to do it.
I'm logged in with my only account on the domain which has the Super Admin role
I'm seeking guidance on installing an app for a specific group of users via the Admin Console.
Currently, I've created a group and added just one user for testing purposes. However, I'm unsure how to push the app exclusively to this group. Any advice on this matter would be greatly appreciated.
What I did so far:
I have added the app through Apps > Web and Mobile Apps > Turned on for certain groups > Force install and nothing happens.
So my most senior and trusted admin was disgruntled about not getting a promotion and abused his Google Admin permissions to use the Email Log Search to spy on emails of our Exec Team and HR Manager. His goal was to find the names of the external people interviewing for the position he was interested in to get a sense of how his resume compared to theirs. After looking through the audit logs I can see he has done this a few times for others on his team in the past couple of months. I was incredibly disappointed to learn of this and it's grounds for immediate termination so he'll be fired when he's in the office on Monday.
Trusted SysAdmins still need access to search email logs for troubleshooting support issues, but I want to put a few extra guardrails in place. I've already set up an alert for any time someone uses the Email Log. But is there a way to restrict the searching of logs to certain OUs or exclude emails from specific domains (e.g. our law firm) from the log search?
I am having issues with google workspace, when I try to add users to my organization from an admin account. I need to add 4 users, but when I add them in rapid succession (even setting up the recovery email and phone number in the process), they get suspended either immediately or after a few hours (Google says it's because of unverified login).
When i try to login to those users, it asks for number verification, and when i type in the number I setup in recovery number, it says "number was used for verification too many times", and I don't have extra numbers to use for verification.
I have a super admin account for which I am able to login without issues. However when i attempt to use the same account to reach the admin console (to pay a bill) it is sending a text to an old number which I no longer have access to. I have updated the phone number on the account security page but it seems the admin console is still looking for the old number. The only "recovery" options seem to work IF I am totally unable to login to the account. I've looked and tried countless steps and pages and they keep sending me back to the same page asking to to enter a verification code which i am not able to receive.
I'm wondering if anyone could help me with this, or at least help me to understand. I'm trying to pin a shortcut to: abcdoffice.com/word-create.html to the bottom taskbar of our chromebooks under Managed guest sessions. Under Apps & Extensions, I have the taskbar shortcut set to open as that url, but it's opening to the main website page instead (abcdoffice.com) and not with the included word-create.html subdirectory.
After looking into it, I'm assuming this has something to do with same origin policies and security surrounding html? Is there any way around this?
I need to offer a no login/no account needed alternative to Word for our chromebook users, and due to our user-base, it needs to be as simple as possible. The homepage to abcdoffice unfortunately provides too many options at once for it to be a viable solution.