Shared Docs Between Specific students

[ParatrooperJoe]

Okay, so please don't crucify me, lol. I know in many peopes opinion (including mine) this is mostly a discipline issue that should be resolved by admin. Never the less, despite that, I am asking this amazing and very awesome community, if there is a way to do the below mentioned thing, through some sort of restrictions somewhere within the Google Admin console (or even using GAM ADV, if possible).

I have 3 specific students, call them student1@mystudentdomain.org, student2@mystudentdomain.org, and student3@mystudentdomain.org,  

I am seeking the ability to prevent those specific students from sharing docs with eachother, but still be able to share docs with teachers whose emails end in @mystaffdomain.org

(student emails end in @mystudentdomain.org) All staff and students are part of the same domain though.

If not the above, then perhaps prevent those 3 specific users from being able to share docs with anyone whose email ends in @mystudentdomain.org, but continue to be able to share docs with @mystaffdomain.org

If that is possible, I am sure I can use the investigation tool to then search for any documents they have shared with eachother, and remove access, but the above would be the first step I would need to take.

Yes these particular students are being enough of a problem that I have received this request, and yes, I know they should handle this via discipline (which they are) but we are seeking to just try and prevent them from even sharing docs with eachother int eh first place.

I appreciate any help with this!

[ddelboccio]

I  know I currently use a Gmail content compliance rule to prevent students from posting messages to email groups.

But I thought I read some where that a compliance rule could potentially stop the sharing "message" from be sent,  but the shared file itself would still be shared.

[Kim_Nilsson · Accepted solution]

Yes, you should be able to manage that with Drive Trust Rules.

https://support.google.com/a/answer/10621317?hl=en

[ParatrooperJoe]

@Kim_Nilsson This is amazing and exactly what I needed. Thank you!

[Ivan]

It's very easy to implement. Here are some screenshots on how I did it:

Using groups, it's pretty flexible as you can pop students into the group via AD or whatever system you use and the system will take care of the rest.

If you use GAM,  you can also hide the group from the global address list so it doesn't show up when people search for it: gam update group BlockedStudentGroupName includeinglobaladdresslist false

ALSO, if you want to block emails from going to/from students that are in that blocked sharing group, it's possible (using 2 compliance rules), depending on how your students are named (hopefully students in general will have something that you could form a RegEx around, like numbers or a pattern in the username, so you can still allow messages to staff).