Has anyone experienced or worked with this scenario:We have an SSO provider that apps authenticate to (SAML, etc.)Google authenticates (and password management) through this SSO providerHow would installing GCPW work (or not work, or difficulties) wh...
https://workspaceupdates.googleblog.com/2026/05/default-CAA-for-SAML.html
Chi gestisce Google Workspace a scuola lo sa bene: il tempo non basta mai.In questi mesi, grazie al lavoro della nostra community, abbiamo raccolto migliaia di risorse preziose (circa 2200 risorse): dalle configurazioni di sicurezza, alle checklist, ...
Did you all know that this setting is now manageable per OU?I did not know that!It used to be an all or nothing setting, making it hard to keep it enabled, if you only wanted it allowed for staff and not students.Documentation here.Setting here.
https://er.elpadmin.comSito web ufficiale ELP Admin Community Emilia Romagna (Italy)Come Google Education Leader Program Facilitator e Super Admin Google Workspace che gestisce quotidianamente diverse piattaforme, so bene quanto sia sfidante per noi ...
In Gmail Compliance & Spam settings you can exclude certain addresses from the spam filter.In my opinion, it's a good idea to do so for the official sender addresses from Google services, so they always reach their recipients. Google, of course, make...
You have probably received this in your email.The upcoming change in how Drive handles permissions should not negatively impact your consciious work to restrict users' access to individual content./Kim***Dear Google Workspace for Education administra...
I've been contacted by someone from AppsEDU inviting us to trial workspaceaudit.com. It looks interesting, but its a new product (AppsEDU has been rebranded from Appsevents, which has been a Google Edu partner (apparently) for 14 years prior).Has any...
I have created a CAA rule for blocking older Windows and MacOS from logging into Google Apps. It is currently in Monitor Mode but it seems to block what I want to allow. Do I have it misconfigured or am I reading the log wrong?Config....Log....
We are looking forward to seeing you in the Sydney Google office on Thursday or online if you can't make it in person We will have our customer engineer , Richard Johnson in the session to present to you and take part in our circle discussions See yo...
Great to be with Richard and Steve in the Auckland office today.Thanks for the learnings and great hospitality. I learned about Vault, and set it up to save indefinitely, so an attack (Ransom etc.) won't be as bad as it might be for our data.CheersCr...
We identified something that was new to us but maybe others already knew this. We have GCP disabled within our Google Workspace environment for all users except a few that need itWe have AppScripts enabled by default - something that may change in th...
We're looking to limit the use of some 3rd party meeting assistants that don't meet our data privacy standards.Typically these services have a bot join the meeting.Our staff are able to have outside Meet participants and we don't want to move to a do...
With the ever evolving phishing campaigns that go around, I was wondering what (if anything) admins are doing to combat the "Item shared with you:" emails that users get. Clearly you can't revoke the access. You could use an internet filter to bloc...
Has anyone else encountered this issue? A number of our teachers added images and videos to their slides and docs. In the place of the video or the image there is an exlamation point. We tried clearing the cache and history, accessing the slide or do...
Greetings all,Per Google's upcoming change to force 2SV on all admin accounts, we're looking to clean up some of our older admin accounts. One is related to our GCDS tool. I've followed instructions on creating a Google Service account and I think I...
Greetings all,I managed to catch a email sent to many of my staff early but I cannot for the life of me figure out how to remove shared docs from users Drives in Google Admin. I believe I've correctly deleted the original emails from affected users v...
We're finally getting around to turning off third party apps in our GW. We're starting with restricting Drive (already completed). We have ~50 trusted apps so they retained access to Drive (we're higher ed btw). My understanding is that once we restr...
So we got notice that our storage was at 10% available. So I looked and appears that an @gmail.com address was able to create a Shared Drive within our GW, and upload 4TB of Vietnamese movies... I'm currently investigating to see if/who at our Organi...
I read in the K12sysadmin group on Reddit that uBlock Origin is going away. I implemented it a while back when several of you recommended it for K12 security. Now that it may be going away, what alternatives would this group suggest?
Is there a way using EDU Fund. that we can restrict Managers (Drive) and Owners (groups) to only be our domain, but still allow external members/viewers?We had a situation where someone added an external gmail account as a manager, and ended up uploa...
Olá, líderes! Na semana passada, tivemos o nosso primeiro GEG on Air de 2025, com a participação do Arthur Guedes, Gerente de Comunidade e Distribuição. Nesse encontro, abordamos sete princípio de segurança no uso de dispositivos e recursos digitais ...
Hello,I am trying to understand if our small school should permit students to login from home on their own devices.At school they are 1to1 but they do not take them home. They are 7-11 years old.As the admin, I would like to turn off access from outs...
Nella vostra scuola avete attivato la funzionalità passkey per fare l'accesso agli utenti della vostra scuola? Può essere utile per la comunità scolastica?
I've got higher-ups looking for answers to an issue: An external user (parent of student) has requested access to view an internal user's Doc (using the formal "request access" link for Docs).This doc is Not meant for external viewing, and permissio...
I'm having a hard time finding a "correct" way to tackle this: We use DLP for various things here in Google Workspace, and I'll get notifications from time to time related to this. The thing is, if I get notification it's saying who the file owner/s...
Does having a user turn off the "sync with google account" in Google Authenticator remove the codes from that device?We just implemented/changed to the new SAML Profile that Google is recommending which apparently signs people out (happened to myself...
I have yet to see this in our environment but wanted to share.Phishers Exploit Google Sites and DKIM Replay to Send Signed Emails, Steal Credentialshttps://thehackernews.com/2025/04/phishers-exploit-google-sites-and-dkim.html
So I've just discovered that while we have emails from external sources, outside of a small whitelist, going to our students blocked evidently shared files will potentially breeze right past that. One, the share email will go right through because th...
Greetings all,We're starting to see an uptick in phishing attempts and we know the ip address of some of the attempts are coming directly from a certain country (coughrussiacough). Is pretty much all I can do is block the ip ranges associated with th...
