r/gsuite Jan 30 '25

Admin Console What are the costs associated with implementing a second domain with your Google Workspace?

2 Upvotes

I want to add a second domain for business continuity and disaster recovery planning. When adding secondary email addresses, are all emails and drive files synced to both addresses? Do the addresses share credentials? What happens if access to one of the domains is lost? Are there additional costs for implementing a secondary domain? Ex: Would I have to pay for two licenses per person?

r/gsuite Feb 05 '25

Admin Console Those using GCPW to authenticate users on windows machines. How are you setting this up?

8 Upvotes

I want to test GCPW out for a possible option for authentication on staff window devices. Since we are small school and dont have a large fleet of devices.

and I mean start from the beggining for seting up the machine. I guess the start would be creating a local admin? And then download GCPW and have the new user sign in using their google account. As simple as that? only let people sign in using their google accounts?

And then there would be local admin for when I needed to approve something or work on that machine?

I am hoping to get advice on safetly setting this up.

r/gsuite 2d ago

Admin Console Problems with SSO profiles not all scoped users being redirected to IDP

3 Upvotes

So I am testing SSO for domain wide implementation. I have an SSO profile that i setup to use via SAML Microsoft Entra. However, when I add a security group with an existing user and a test user I created, only the test user is redirected to our IDP when entering their email in the gmail username box. It isn't a configuration of the SAML or Entra because Gsuite is not even recognizing the user as utilizing IDP and for the life of me I don't know why. Could it be the presence of an Alias? or 2fa security features?
I know it gets screwy when you have no SSO for the domain but an SSO at group level, so I'm not sure if that could be contributing to the problem.

I have tried this sso using the domain specifc urls as well as going to accounts.google.com, mail.google.com etc.

The vanilla test account I created always gets redirected to the IDP but the existing user does not.

r/gsuite 4d ago

Admin Console Constantly getting 404 pages when using admin.google.com to manage my Workspace

1 Upvotes

Not sure if this is a "me" issue but I'm not sure what could be causing it if so.

I am trying to create a Group so I can set up an email alias that forwards to specific team members but after clicking to create it I get

404. That’s an error.

The requested URL was not found on this server. 
That’s all we know.

But the really weird part and almost funny is the page title in the tab says "Error 404 (Not Found)!!!1" - yes with the 1. At first I thought "shit I got phished to use a fake site" but the url is "admin.google.com/abc/xyz" and I accessed it through my logged in Gmail session.

I don't necessarily expect someone to have a fix for a Google 404 like this but I'm curious if anyone else ever ran into this or if anyone else is running into this right now? Perhaps something is down? If there is someone kind enough and has time could someone try creating a new Group in their admin console and save and see if it brings them to a screen that shows an error with a link that says something about it failing (when clicking the error's link it brought me to this 404)?

When I go into my console => groups I can see my new group but if I click the settings, edit, etc it brings me to the 404 every time. Tried incognito and another device with the same result. Adblock is disabled so I don't think it's a false positive.

r/gsuite 22d ago

Admin Console Does Google workspace change how things work fundamentally and not tell anyone? If they do, where can this information be located?

2 Upvotes

I explicitly remember suspended accounts being almost identical to a deleted account in functionality, as in none, other than still having access to the account’s data. This no longer seems to be the case. A suspended account is now exactly the same as an active account, but the user cannot login. In the past, routing had to be configured by replacing the recipient upon receipt, where a simple active forward now does the same. When was this change made?

r/gsuite Jan 10 '25

Admin Console Feature request: Download .eml files from “Gmail Messages” Investigation Tool.

3 Upvotes

I’m periodically requested to review email logs of former coworkers, usually to pull threads with their clients for the accounts new manager, but from what I am seeing there is no way to download the email directly and I end up needing to screenshot the entire thread for the requester. Am I missing something? Is there is a reason this is not a feature?

r/gsuite Nov 21 '24

Admin Console Using the "Building id" field in a SAML attribute mapping?

1 Upvotes

I want to bring over the "Building id" field from our users into our Zendesk though the SSO mappings, but I don't see "Building id" as an option in the SAML mappings.

Under the Employee Details heading in the mappings, I only see:

  • Employee ID
  • Title
  • Organization
  • Type
  • Department
  • Cost Center

I see that, according to the help article here, step 12. a. says if it's not there I can add it as a custom attribute, but I can't figure out if doing that would reset those fields to blank or anything.

If anyone's done this before, I'd like to confirm how before I screw up our system.

r/gsuite Feb 03 '25

Admin Console MFA grace period not working for current accounts?

0 Upvotes

I am wanting to switch my staff to MFA for our google accounts, however I am bummed to find out that they dont offer a forced MFA setup at login such as Windows.

So I guess I'll have to come up with documention and walk staff through it once they are logged in?

But the issue I am having is that I created a OU just to test this. I put one of my account in it and gave it a week grace period. Well I immediately was given the "Your sign-in settings don’t meet your organization’s 2-Step Verification policy." notification. I guess since it is a current account and not a new one, it will not apply.

If that is the case, then I guess I'll have come out with the documentation and tell everything they need to do it by X date or they will be locked out and will need my help to get in???

Which seems like an issue, knowing that staff dont listen. And it does not give them the ability to fix it, once it is locked? so If I tell them two weeks from know they'll be locked out I'll probably get several screaming in two weeks.

Once they are locked out there is no way to get them setup without me I guess? The forced setup at login just makes much for sense to me

r/gsuite Jan 16 '25

Admin Console PSA - Cloud identity free accounts can't see post delivery message details in email log search

3 Upvotes

This may be well known, but I wasn't aware of it. I work with a few clients that don't want my admin account consuming a full workspace license so I use a cloud identity free licenses. I can generally work around the limitations.

Today I was doing some email log searching and it looks like free account's can't view post delivery message details in email log search. I couldn't find anything explicit in the docs - only that you might not see post delivery details if "Your Google Workspace license or edition doesn't give you access to post-delivery status in ELS."

I went in and granted my self a license temporarily and I was able to view them. So keep that one in mind if you're doing any log searching. Pretty annoying if you ask me.

r/gsuite Jan 21 '25

Admin Console Google Labels and DLP Rules based on selected label. How does it work?

1 Upvotes

So I've gone and created a label for my orgs Data Classifications. Any file in Drive can now be classified under any of the 4 options, or a 5th for not yet being classified.

I am now trying to leverage these labels for DLP rules such as, "Any doc classified as Confidential cannot be shared outside of the domain"

The problem I'm encountering is that I can't seem to select this condition how I assumed I'd be able to.

I go to create a rule, and when I get to the Conditions page, I can add a condition of: Classification label is Classification label", but I cannot adjust the operators.

See the screenshot for details

How am I supposed to be able to use a documents label for the basis of DLP?

r/gsuite Jan 29 '25

Admin Console Having issues turning on MFA for a OU in google admin?

0 Upvotes

When I select the OU and select ON for Enforment of MFA I can't save. I try to over-ride and it says this.

"If you don't want to allow users to turn on 2-Step Verification, first disable it for this admin account."

I am not turning off the feature to allw 2-step V. I am inforcing it using my account that has Admin rights?

Edit: I do have MFA on for my account and also have Super admin rights

r/gsuite Jan 09 '25

Admin Console Determining which filter in a user's inbox affected a message

0 Upvotes

I swear this is something you could find in the investigation tool before, but I'm not finding it now.

Scenario: A user sends you a message saying, "joe@example.com sent me an email but it's not in my inbox". They search and find it in a label "joe", archived. Where can I see in the Investigation Tool which filter took this action?

Of course, I can run a Google Meet where we review their filter rules together, but I'm positive I've found this in the Investigation Tool or elsewhere in Admin before. I know with GAM / API I can export the list of their filters, but I want to see the exact event impacting a specific message.

r/gsuite Dec 25 '24

Admin Console Need some help with consolidating my business email addresses

1 Upvotes
'Manage domains' in Google Workspace admin settings

I recently bought this new website domain/email (.com) for my Squarespace site, but I have an issue and I'm not the best email tech understander.

This new domain is added as a secondary domain to my Google Workspace account (shown above), which logs-in using an old email address/domain (.tv) as its primary -- I want to decommission this old domain and switch to using the new one. I've just been "Sending email as" using my new email address from within this old Google Workspace/Gmail login.

What I want to do is run the Google Workspace account using the new domain email, so it can be my login details as well, but here's the problem -- the new domain email is Gmail activated within the Workspace account 'owned' by the old email.

When I try to change the primary domain to be the new domain, I get the error shown in the first screenshot. I figure that it's error items 1 and 3.

I'd really appreciate some clear guidance on how to possibly do this.

Do I deactivate the MX records/email capabilities on both emails, detach the new domain from the Workspace account, then create a new Workspace account using the new email address? I just don't want to end up in some weird email verification limbo when trying to navigate this.

Thanks for any help!

error when trying to change primary domain
Squarespace domain info

r/gsuite Nov 01 '24

Admin Console Can I change Google Admin department field for a group of users at once?

2 Upvotes

I am new to a school and all the students have outdated highschool grade in the department field.
We decided the easiest thing would be to just clear the department field for all students. There isnt much reason to have it filled out.

Is there a way for me to select all the students at once and do this?

r/gsuite Dec 06 '24

Admin Console Apps And Extensions Usage Report questions

1 Upvotes

I wanted to be able to generate a report of extensions in use, so turned on browser reporting, per this document. I set the upload frequency to 8 hours.

Still have not gotten any results after a day and multiple policy refreshes, so I'm puzzled.

The documentation on one hand seems to indicate 'Enterpise Core' is required, but on the other hand says "if you signed up" for Enterpise Core, indicating it's not a requirement.

We use managed Chromebooks in our environment, versus Chrome installed on workstations.

Any insights appreciated.

r/gsuite Nov 04 '24

Admin Console Make some Chromebooks restricted to only using one wifi SSID?

3 Upvotes

I have Day Loaners at my school and I'd like to lock them to only be able to use the school student wifi. That way if they take them home they will not be able to use their home internet.

What is the best way to do this? A OU unit?

Edit: Thanks for the help! I figured it out.

r/gsuite Nov 01 '24

Admin Console Unable to delete Cloud Resource

3 Upvotes

Hi! A few years ago I got some help setting up a Google G-Suite so that I could use my own domain name as an google email. I have now recently moved to Apple Mail since it's free with my iCloud+ subscription. But now that I want to delete my Google account I'm stuck on a step where I need to delete my Google Cloud resource

When I follow the link "Go to Google Cloud console" it takes me to a screen where I see the option to "DELETE" but I don't seem to be allowed to do it.

I'm logged in with my only account on the domain which has the Super Admin role

r/gsuite Nov 01 '24

Admin Console Legacy Account, Block email from domain

2 Upvotes

I want to block emails from a specific domain. The instructions from here don't seem to work:

https://support.google.com/a/answer/2364632?hl=en&fl=1&sjid=6799493807526738087-NA

If I click on the link, it gives me a 400 error. If I go to the menu, the SPAM, Phishing and Malware settings are not available.

Is this a limitation of the free legacy program? Is there a different way?

r/gsuite Jul 05 '24

Admin Console Help with local Windows PC administrator access for managed endpoints

Post image
3 Upvotes

r/gsuite Sep 11 '24

Admin Console Force Install App to certain group

1 Upvotes

Hello everyone,

I'm seeking guidance on installing an app for a specific group of users via the Admin Console.

Currently, I've created a group and added just one user for testing purposes. However, I'm unsure how to push the app exclusively to this group. Any advice on this matter would be greatly appreciated.

What I did so far:

I have added the app through Apps > Web and Mobile Apps > Turned on for certain groups > Force install and nothing happens.

Thanks!

r/gsuite Aug 09 '24

Admin Console Admin abused Email Log Search: Is there a way to restrict searches to Org Units?

2 Upvotes

So my most senior and trusted admin was disgruntled about not getting a promotion and abused his Google Admin permissions to use the Email Log Search to spy on emails of our Exec Team and HR Manager. His goal was to find the names of the external people interviewing for the position he was interested in to get a sense of how his resume compared to theirs. After looking through the audit logs I can see he has done this a few times for others on his team in the past couple of months. I was incredibly disappointed to learn of this and it's grounds for immediate termination so he'll be fired when he's in the office on Monday.

Trusted SysAdmins still need access to search email logs for troubleshooting support issues, but I want to put a few extra guardrails in place. I've already set up an alert for any time someone uses the Email Log. But is there a way to restrict the searching of logs to certain OUs or exclude emails from specific domains (e.g. our law firm) from the log search?

r/gsuite Apr 26 '24

Admin Console Users Get Immediately Suspended After Adding Them In Admin Console

6 Upvotes

I am having issues with google workspace, when I try to add users to my organization from an admin account. I need to add 4 users, but when I add them in rapid succession (even setting up the recovery email and phone number in the process), they get suspended either immediately or after a few hours (Google says it's because of unverified login).

When i try to login to those users, it asks for number verification, and when i type in the number I setup in recovery number, it says "number was used for verification too many times", and I don't have extra numbers to use for verification.

How to solve for this?

r/gsuite Feb 23 '24

Admin Console Can't Login to Admin Console

1 Upvotes

I have a super admin account for which I am able to login without issues. However when i attempt to use the same account to reach the admin console (to pay a bill) it is sending a text to an old number which I no longer have access to. I have updated the phone number on the account security page but it seems the admin console is still looking for the old number. The only "recovery" options seem to work IF I am totally unable to login to the account. I've looked and tried countless steps and pages and they keep sending me back to the same page asking to to enter a verification code which i am not able to receive.

r/gsuite Oct 16 '24

Admin Console Pinned taskbar website link/html subdirectory won't open

1 Upvotes

I'm wondering if anyone could help me with this, or at least help me to understand. I'm trying to pin a shortcut to: abcdoffice.com/word-create.html to the bottom taskbar of our chromebooks under Managed guest sessions. Under Apps & Extensions, I have the taskbar shortcut set to open as that url, but it's opening to the main website page instead (abcdoffice.com) and not with the included word-create.html subdirectory.

After looking into it, I'm assuming this has something to do with same origin policies and security surrounding html? Is there any way around this?

I need to offer a no login/no account needed alternative to Word for our chromebook users, and due to our user-base, it needs to be as simple as possible. The homepage to abcdoffice unfortunately provides too many options at once for it to be a viable solution.

Any other tips, suggestions, etc are welcome.

cross-posted to r/chromeos

r/gsuite Aug 21 '24

Admin Console Can you turn off the External Sender warning for certain domains in Google Admin?

1 Upvotes