Block Google Drive domain

[alexgrutza]

This may have been asked (most likely has been, maybe even by me...) but is there a way to block an entire domain from sending any communication (email and Drive) to us? 

I've reached out at least once before to someone in their IT department but I just want to block their domain now from sending anything to us. It's in a geographically distant region from us.

Any way to do this with Edu Fundamentals? I suppose the other option may be to use our Proofpoint to block "Header ReplyTo" and do a wildcard on their domain.

[Kim_Nilsson]

Incoming Gmail 

Yes, both Routing and Content Compliance rules should be easy to block that.

Incoming sharing

This is a lot harder if you allow any incoming sharing. I'm fairly sure that it still can't be done. I don't think Drive Trust Rules are flexible enough, or even affect incoming sharing at all.

[alexgrutza]

Thanks. I've created a separate compliance rule for this domain. 

On a side note, is there any ability outside of GAM that you can pull (delete) emails that users received? I have used a combination of Proofpoint/Gmail log search for the Message-ID and then export the list of users and perform a GAM command to delete the Message-ID from that list of users. Just wondering if there's a way to perform that from within Google Admin. We have Edu Fundamentals, so maybe the Investigation tool is the tool to perform this, which we don't have?

[Kim_Nilsson]

Yes, the Investigation Tool can do that, if you have the appropriate licence.