User Tools

Site Tools


service:googleapps:googleappsgeneral

Google Apps General

————————————————————————————————————————————————

Setup forwarding of email from the admin panel

From: https://support.google.com/a/answer/2368153?hl=en

Three Methods I use
1. forward all from user settings
2. set up a forwarding email group
   a> forward all to forwarding group from settings
   b> add members as recipients to group 
3. Configuring a Default routing setting for a domain
   a> In your Google Admin console (at admin.google.com)...
   b> Go to Apps > G Suite > Gmail > Advanced settings.
   c> Click Default routing.
   d> Click Add setting and configure
   e> https://support.google.com/a/answer/2368153?hl=en

From : Gsuite Support From what I understand you wanted to configure a rule that will forward emails sent to an employee that is leaving the company to 2 other user accounts.

As discussed, there are several options to configure such a rule, but in our case we configured a default routing as per this Help Center article: https://support.google.com/a/answer/2368153?hl=en

Another option is to forward emails from the Gmail Inbox of the user as per this Help Center article: https://support.google.com/mail/answer/10957?hl=en

However, please keep in mind that, if you configure a forwarding rule in the Gmail inbox of the user and then delete the user account, the forwarding will stop working as well.

As promised, I'm also sending you another Help Center page with more information regarding the routing options in G Suite: https://support.google.com/a/answer/6297084?hl=en

Groups

To setup as a public email address.

  • Google Apps for Business Admin Console.
  • click on the Groups option.
  • click on top of the name of the group
  • access settings … information … advanced … reset group …Select a group type
    • set list to email list
    • Select Force reset of permissions and roles
    • press reset group
  • access settings … Settings … Moderation … Spam messages
    • select Skip moderation queue and post message to Group from the 'Spam messages' section.
    • Press Save
  • access settings … Permissions … basic permissions … join the group …
    • only invited members
    • Press Save
  • access settings … Permissions … basic permissions … post …
    • Anyone on the web
    • Press Save
  • access settings … Permissions … basic permissions … View topics …
    • Remove “All organizational members”
    • Press Save
  • access settings … Information … General info … Posting options
    • enable options Allow posting by email
    • Disable Allow users to post to the group on the web
    • Press Save
  • access settings … information … Content control … Archive options
    • De-select Archive messages to the group
    • Removes storage of messages for just the group
    • All messages will remain in the forwarded to inboxes
  • access settings … Roles … Roles … Owner
    • Add Member
    • Select Me or the Admin person
    • Press Save

Collaborative Groups

To setup as a public email address.

  • Google Apps for Business Admin Console.
  • click on the Groups option.
  • click on top of the name of the group
  • accessed settings … information … advanced … reset group …Select a group type
    • set list to Collaborative inbox
    • accessed settings … information … advanced … reset group …Participants
    • set list to All members of the group
    • Select Force reset of permissions and roles
    • press Reset this group
  • accessed settings … Settings … Moderation … Spam messages
    • select Skip moderation queue and post message to Group from the 'Spam messages' section.
    • Press Save
  • accessed settings … Permissions … basic permissions … join the group …
    • only invited members
    • Press Save
  • accessed settings … Permissions … basic permissions … post …
    • public
    • note: the first time I tried this: the Group had ‘Public’ selected
    • Press Save
  • accessed settings … information … general info … posting options
    • enable options Allow posting by email
    • Disable Allow users to post to the group on the web
    • Press Save
  • accessed settings … information … Content control … Archive options
    • De-select Archive messages to the group
    • Removes storage of messages for just the group
    • All messages will remain in the forwarded to inboxes
  • accessed settings … Roles … Roles … Owner
    • Add Member
    • Select Me or the Admin person
    • Press Save
  • accessed settings … Members … All Members … Select One … Email Delivery
    • Select Digest email
    • Press Save

POP access - Allow or disallow less secure apps to access accounts

From: https://support.google.com/a/answer/6260879?hl=en

Sign in to your Google Admin console.
Sign in using an administrator account, not your current account marcus.e.hall.jr@gmail.com

From the Admin console dashboard, go to Securityand thenBasic settings.

To see Security on the dashboard, you might have to click More controls at the bottom.

Under Less secure apps, select Go to settings for less secure apps.

SIL Group Instructions

From: http://googleapps.sil.org/overview/connecting-wycliffe-sil

SIL Website for support of Google Apps

SMTP Servers

From: http://support.google.com/a/bin/answer.py?hl=en&answer=174125

Name/Host/Alias 	Time to Live (TTL) 	Record Type 	Value/Answer/Destination
Blank or @ 	3600 	MX 	1 ASPMX.L.GOOGLE.COM
Blank or @ 	3600 	MX 	5 ALT1.ASPMX.L.GOOGLE.COM
Blank or @ 	3600 	MX 	5 ALT2.ASPMX.L.GOOGLE.COM
Blank or @ 	3600 	MX 	10 ASPMX2.GOOGLEMAIL.COM
Blank or @ 	3600 	MX 	10 ASPMX3.GOOGLEMAIL.COM

Google Apps SMTP relay

From: https://support.google.com/a/answer/176600?hl=en

Google Apps SMTP settings to send mail from a printer, scanner, or app
three available options are: SMTP relay service, Gmail SMTP server and 
Restricted Gmail SMTP server.

Google Apps SMTP relay (recommended)	smtp-relay.gmail.com Port 25, 465, or 587 SSL/TLS protocols.
Gmail SMTP server			smtp.gmail.com Port 465 (SSL required) - Port 587 (TLS required)
Restricted Gmail SMTP server		aspmx.l.google.com Port 25 TLS not required

SMTP relay: Route outgoing non-Gmail messages through Google

2021-01-29

From <https://support.google.com/a/answer/2956491?hl=en#zippy=%2Cpostfix>

If you don’t require TLS encryption, you can configure your on-premise mail server to point to smtp-relay.gmail.com on port 25, port 465, or port 587.

From <https://support.google.com/a/answer/2956491?hl=en#zippy=%2Cpostfix>

We recommend that you configure your mail server to present a unique identifier (such as your domain name or the name of your mail server) in the HELO or EHLO command in the SMTP relay connections your server makes to Google.

From <https://support.google.com/a/answer/2956491?hl=en#zippy=%2Cpostfix>

In these cases, you need to configure your mail server to either ensure that the server is using SMTP AUTH to authenticate as a registered Google Workspace user or present one of your domain names in the HELO or EHLO command. See the instructions here.

From <https://support.google.com/a/answer/2956491?hl=en#zippy=%2Cpostfix>

Postfix

Follow the instructions below to set up the SMTP relay service for Postfix. These instructions are designed to work with a majority of deployments. There is no need to increase the timeouts for Postfix servers. The default timeout settings are appropriate. To set up a smart host for Postfix:

1. Add the following line to your configuration file (example path /etc/postfix/main.cf):
         relayhost = smtp-relay.gmail.com:25

From <https://support.google.com/a/answer/2956491?hl=en#zippy=%2Cpostfix>

If either is true, configure your mail server to either ensure that the server is using SMTP AUTH to authenticate as a registered Google Workspace user or to present one of your domain names in the HELO or EHLO command.

From <https://support.google.com/a/answer/2956491?hl=en#zippy=%2Cpostfix>

What domain name to use in outbound mail

Sepcify

 myhostname = really.good.one
 good.one must be the domain you are sending from and to

The myorigin parameter specifies the domain that appears in mail that is posted on this machine. The default is to use the local machine name, $myhostname, which defaults to the name of the machine. Unless you are running a really small site, you probably want to change that into $mydomain, which defaults to the parent domain of the machine name. For the sake of consistency between sender and recipient addresses, myorigin also specifies the domain name that is appended to an unqualified recipient address. Examples (specify only one of the following):

/etc/postfix/main.cf:
  myorigin = $myhostname (default: send mail as "user@$myhostname")
  myorigin = $mydomain   (probably desirable: "user@$mydomain")

From <http://www.postfix.org/BASIC_CONFIGURATION_README.html>

Google APPS move email from one user to another

  • Use Google Apps Migration for Microsoft Exchange
  • create cvs file with from and to account
    • Like user.fullemailaddress@domain.name#Password, toemail.address@domain.name
  • Use Admin account to sign in

migration between Google Apps accounts

From: https://tools.google.com/dlpage/exchangemigration

From: https://support.google.com/a/answer/180898?hl=en

  best tool available for this is Google Apps Migration for Microsoft Exchange, with this you will be 
  able to migrate all of the emails or if you want to migrate only a portion you can do it as well by 
  setting dates,

Split Delivery

Split delivery set up using the Default routing.

add a host APPS … Google Apps … Settings for Gmail … Advanced Settings … Hosts … add route

Add default routing APPS … Google Apps … Settings for Gmail

From: https://support.google.com/a/answer/2368153?hl=en

From: http://blog.shuttlecloud.com/google-apps-forwarding/

From: https://support.google.com/a/search?hl=en&query=split+delivery

You may refer to this article that explains how to add a new host to the account https://support.google.com/a/answer/2614757?hl=en,

Add Host

and this other how to configure default routing settings https://support.google.com/a/answer/2368153?hl=en.

Add Default routing 01

Add Default routing 02

Google Docs Sync Alternatives

From: http://www.syncdocs.com/

  Improved Google Drive Sync and Backup
  

From: https://www.insynchq.com/features

  Multiple Accounts
  Sync any files outside insync directory
  10 per year
  

Set up Google Sync with your iOS device

Features

Known iOS issues

POP receive access stopped receiving email on iPhone

reset gmail account

From: https://support.google.com/a/users/answer/139635?hl=en

  Invalid Password Prompt. If you see an error message that reads "Invalid Password", it's 
  likely that you'll need to unlock your account by solving a short CAPTCHA. Go to
  https://www.google.com/accounts/UnlockCaptcha 
  and, if asked to, fill in your email address, password, and the letters in the CAPTCHA box.

Google Apps Sync does NOW works with Office 2013 Click-to-run

May have been corrected aronud this time 2014-01-01

From: http://productforums.google.com/forum/#!topic/apps/b6q0wCG3ag0%5B1-25-false%5D

  [Digital River is Microsoft’s partner for fulfillment on online distribution for downloadable 
  Microsoft products.] All links is from Digital River, same as the Download Office 2013 Language Packs 
  direct links. They are 100% safe and comes direct from Microsoft. All versions is Retail so you need a 
  legit key to install them

Possible Fix

From:http://www.syncfix.net/about-syncfix/what-is-syncfix/

  SyncFix is a simple “run once” tool that fills in the missing links that prevents Google Apps Sync 
  from working with Outlook Click to Run editions

Office 2013 Direct Download Links

From: http://www.heidoc.net/joomla/technology-science/microsoft/73-office-2013-direct-download-links#

  With the release of Office 365, Microsoft Office is now tightly integrated with the Cloud, Skydrive, 
  the Windows Live services etc. As a result of this change, the majority of the download versions of 
  the Office 2013 applications is no longer delivered as publicly available files on the Digital River servers, 
  but directly streamed onto the client devices from Microsoft's servers. There is also an alternative download 
  source with the backup images directly from Microsoft. Both download sources make up a complete repository or 
  all Office 2013 downloads.

Advanced Search Operators Parameters

From: https://support.google.com/mail/answer/7190?hl=en

  Advanced search operators are query words or symbols that perform special actions in Gmail search. 
  These operators allow you to find what you're looking for quickly and accurately. They can also be 
  used to set up filters so you can organize your inbox automatically. Some of the most useful 
  operators are listed below.

Google Apps Migration for Microsoft Outlook®

Download: https://support.google.com/a/users/topic/28813?hl=en&ref_topic=1688516

From: https://support.google.com/a/users/topic/28813?hl=en&ref_topic=1688516

  You can use Google Apps Migration for Microsoft Outlook® to import data from a 
  Microsoft® Exchange account or PST file

Requirements

1:

From:https://support.google.com/a/answer/176213#gappsreqs


Google Apps Migration for Microsoft Outlook® is available with any edition of Google Apps.

Google Apps for Business / Education customers: Before your users can migrate Microsoft® Exchange 
and PST data to Google Apps, you need to set the Email Migration API (EMAPI) option in the Google Admin console:

    Sign in to the Google Admin console.
    From the dashboard, click Apps, then click Google Apps > Gmail > User settings.
    Scroll to User email upload.
    Check the box for "Allow users to upload mail using the Email Migration API."

    Note: If you're using the free edition of Google Apps, you don't have to do this.

2:

From: https://support.google.com/a/answer/2790331?hl=en

Still need this on to use GAMMO

Configure the Admin console
Step 1: Enable Domain Admin API access

    Sign in to the Google Admin console.
    From the dashboard, go to Security > API reference. Where is it?
    Check Enable API access.
    Click Save changes.

Exchange Sync

From: http://support.google.com/a/bin/answer.py?hl=en&answer=172212

  • Set API - Dashboard … Security … API Reference … Enable API Access
  • OAuth - Dashboard … Security … Advanced Settings … Manage OAuth Domain Key … Enable this consumer key … Save
  • Copy OAuth Key and OAuth consumer secret:
  • OAuth - Dashboard … Security … Advanced Settings … Manage third Party OAuth Client Access … Manage API Client Access
  • enter key (domain name)
  • Enter
  https://apps-apis.google.com/a/feeds/emailsettings/2.0/,
  https://apps-apis.google.com/a/feeds/user/#readonly,
  https://www.google.com/calendar/feeds/,
  https://www.google.com/m8/feeds/,
  https://www.googleapis.com/auth/apps.groups.migration,
  https://apps-apis.google.com/a/feeds/migration/,
  https://apps-apis.google.com/a/feeds/group/#readonly
  • Authorize

GAMME Sync

  • Outlook must be 2003 SP3 or better
  • hostname: 192.168.1….
  • Exchange Service account domain\admin but only the username
  • Google Domain: domain name
  • Google Consumer Key: domain
  • Customer Secret: OAuth … https://admin.google.com/AdminHome?pli=1
  • check calendar … email … contacts
  • Next … Yes
  • After Success on all levels… start

Create csv file

  http://support.google.com/a/bin/answer.py?hl=en&answer=2790320

Outlook Sync

Mac Google Apps

From: http://mailplaneapp.com/tour.html

  Love Gmail? Mailplane makes it even better.

From: http://mac.appstorm.net/roundups/internet-roundup/ultimate-collection-of-google-related-mac-apps/

  Ultimate Collection of Google Related Mac Apps

Google Apps Directory Sync

Common Queries

Note: Active Directory

From: http://www.google.com/support/enterprise/static/gapps/docs/admin/en/gads/3.2.1/admin/ldap.5.4.html#1004916

  Rule: (objectcategory=group)
  Rule: (objectclass=group) Exchange 2003 groups
  Rule: (objectclass=user) Exchange 2003 Users
  User: CN=John Doe,CN=Users,DC=domain,DC=local
  Base: CN=Users,DC=Domain,DC=local

LDAP Utilities

jxplorer

ldp.exe

Adsiedit.msc

http://serverfault.com/questions/294191/is-my-ad-already-an-ldap-server

Having said all that, I prefer ADExplorer from Sysinternals to a plain-jane LDAP browser. It's a little easier to use, since it's meant for use with AD specifically.

es, Domain Controllers speak LDAP.

  LDAP port 389
  LDAP+SSL port 636

As we run Google Apps Directory Sync directly on a DC, I just use port 389. You do, of course, have the option to connect using LDAP+SSL.

  Windows Server 2003
  Building on the foundation established in Windows 2000 Server, the Active Directory service in Windows Server 2003 extends beyond the baseline of LDAP compliance into one of the most comprehensive directory servers offering a wide range of LDAP support. Accordingly, the Windows Server 2003 Active Directory service introduces a number of new LDAP capabilities targeted for IT professionals and application developers. Some of the latest LDAP features include:
  •Dynamic Entries - Active Directory can store dynamic entries allowing the directory to assign Time-To-Live (TTL) values to determine automatic entry deletion.
  •Transport Layer Security (TLS) - Connections to Active Directory over LDAP can now be protected using the TLS security protocol.

LDAP Object Naming

Notes on Setup

  • setup Split Email delivery
  • Setup MX records to point to Google
  • Input email users
  • For migration from Exchange
    • Coordinate passwords (change to Google Format)
    • Send copy of email in Exchange to domain.test-google-a.com
    • GAMME the email to Google Apps
  • Change any internal routing SMTP servers if they are still in MX record list
  • Configure Phone
  • Configure Client software on machines if the user wants to use a client instead of web

Introduction for Users

From: https://sites.google.com/site/appsenterpriselaunchsite/outlook-users

Welcome to Google Apps! Moving to the cloud is easy! Let us guide you through your first days with Google Apps and beyond.

Settings for IMAP and POP

Setup other email clients: Settings for IMAP and POP

Command Line Gam Manager

From: https://code.google.com/p/google-apps-manager/wiki/DomainSettingsExamples

  Dito GAM is a command line tool which allows Administrators to control their 
  Google Apps domain and accounts. With GAM you can create users, turn on/off 
  services for users like POP and Forwarding and much more.
  

See: http://www.ditoweb.com/google-apps-for-hi-tech

Password Characters

From: http://technet.microsoft.com/en-us/library/cc786468(v=ws.10).aspx

 Active Directory special characters
 ~!@#$%^&*_-+=`|\(){}[]:;"'<>,.?/

Help

Custom URL for Services

CNAME points to ghs.googlehosted.com.

Mail routing and delivery: Guidelines and best practices

From: http://support.google.com/a/bin/answer.py?hl=en&answer=2685650

Mail routing and delivery options are accessible from multiple locations on the Gmail settings page – including Advanced Settings, the Hosts tab, and the Default routing tab

From: Luke losin

Hi Marcus,

Here is the what my sales engineer had to say. Let me know if this helps.

“The answer depends on how the customer sets up their split delivery.

If they choose to route messages for unrecognized addresses (not setting up these users in Google Apps) the messages will be checked for spam, however they will simply pass through and be delivered to the legacy server. By clicking the Add X-Gm-Spam header check box, you also add a special header tag to indicate the spam status of the message: • The number 0 in the header indicates a message is not spam: X-Gm-Spam: 0 • The number 1 indicates that a message is spam: X-Gm-Spam: 1 By choosing this option, an administrator at a downstream server can set up rules that will handle spam in a different manner than clean mail. If they choose to create users in Google Apps, while still passing on messages for these users to a legacy server, then they can use the Receiving Routing section and set up a dual or split delivery that provides an option of whether or not to filter out the messages for spam. If they would choose to filter them out, those messages would only be available in the Gmail spam folder and not passed along. This page highlights all the mail routing options available. The 'default routing' option allows for unrecognized addresses to be forwarded and the 'receiving routing' option allows for provisioned Google Apps users to be routed. ”

Logo

From: http://support.google.com/a/bin/answer.py?hl=en&answer=36726

recommended size of 143 x 59 pixels

Creating Aliases in Google Apps Email for Non-Users

From: http://webapps.stackexchange.com/questions/3425/creating-aliases-in-google-apps-email-for-non-users

Open the “Settings” tab at the top, select “Email” under “Services” from the menu at the left, then select the “Default routing” tab. Click “Add Setting”.

You can now decide between “Single recipient” or “Pattern match” if you have more than one. I chose to use a pattern. My pattern looks something like:

(alias1|alias2|alias3)@mydomain.com Make sure that “Modify message” is selected, and check “Change envelope recipient”. Now you can use “Replace recipient” and enter a new address like something@otherdomain.com (or, depending on how things are set up, “Existing-username@” might work for you)

Note: This is a paid Business Apps account, and I don't know if all of these settings exist for free accounts. YMMV.

One more way to do this in Google Apps is to use a “group”. A group is like a mailing list. Here are the steps you can follow:

" Manage This Domain" (for domain1.com)
" Email Settings"
" Users and Groups"
" Create a New Group". Fill-in your details. In your case, the group email address will be "guy". Make sure you choose   "Team" and "Also allow anyone on the Internet to post messages""
" Add new members". Here, you should add "guy@domain2.com"

From now on, whenever anybody sends email to “guy@domain1.com” it will automatically go to guy@domain2.com .

Another way to achieve something similar (but not exactly what you are asking for) is to choose “Manage This Domain” (for domain1.com) –> “Domain Settings” –> “Domain names” –> “Add a domain alias” and then add domain2.com as a domain alias.

Five Google App security settings you should have already changed

From: http://www.techrepublic.com/blog/google-in-the-enterprise/five-google-app-security-settings-you-should-have-already-changed/1185

  • Enable SSL
  • Increase minimum required password length
  • Enable and configure 2-step authentication for user accounts
  • Designate two accounts as administrators OR set the secondary email address to that of an account also secured by two-factor authentication
  • Keep your Google Apps customer and support PIN and phone numbers secured offline

Google Apps: The Missing Manual By Nancy Conner

<iframe frameborder=“0” scrolling=“no” style=“border:0px” src=“http://books.google.com/books?id=SZtsFe66zucC&lpg=PA6&ots=r29jMbCRgR&dq=google%20password%20symbols&pg=PA647&output=embed” width=500 height=500></iframe>

Google Apps: The Missing Manual

Active Directory sync tool

Our Active Directory sync tool is in fact a one-way sync (Active Directory → Google), and it can in fact be used on an ongoing, as needed basis. It is important to note that it will only sync from Active Directory to Google, and not the other way around.

archive the emails/info from previous employees

The best solution to archive the emails/info from previous employees is in fact to create an 'archive@' alias in which you can back up all of your 'legacy' employee's data

Application-specific password required

From: https://support.google.com/mail/answer/1173270?hl=en

An application-specific password is similar to a verification code in that you don't have to memorize it. However, application-specific passwords are longer than verification codes and you do not enter them into web browsers. In addition, you do not get application-specific passwords from your phone – instead, to generate an application-specific password:

password selection tips

From: https://accounts.google.com/PasswordHelp

How safe is your password?

The first step in protecting your online privacy is creating a safe password - i.e. one that a computer program or persistent individual won't easily be able to guess in a short period of time. To help you choose a secure password, we've created a feature that lets you know visually how safe your password is as soon as you create it.

Tips for creating a secure password:

Include punctuation marks and/or numbers. Mix capital and lowercase letters. Include similar looking substitutions, such as the number zero for the letter 'O' or '$' for the letter 'S'. Create a unique acronym. Include phonetic replacements, such as 'Luv 2 Laf' for 'Love to Laugh'. Things to avoid: Don't reuse passwords for multiple important accounts, such as Gmail and online banking. Don't use a password that is listed as an example of how to pick a good password. Don't use a password that contains personal information (name, birth date, etc.) Don't use words or acronyms that can be found in a dictionary. Don't use keyboard patterns (asdf) or sequential numbers (1234). Don't make your password all numbers, uppercase letters or lowercase letters. Don't use repeating characters (aa11). Tips for keeping your password secure: Never tell your password to anyone (this includes significant others, roommates, parrots, etc.). Never write your password down. Never send your password by email. Periodically test your current password and change it to a new one.

2-step verification

From: http://support.google.com/a/bin/answer.py?hl=en&answer=2548882

If you will require 2-step verification of all users in the domain or within an existing organizational unit (OU), you may skip this step. If you need to have a different 2-step verification setting for a select group of users within an organization, create an admin-managed group containing all such users.

Google Apps Password Sync for Active Directory

From: http://support.google.com/a/bin/answer.py?hl=en&answer=2611859

Google Apps Password Sync (GAPS). For businesses that use Microsoft Active Directory® (AD), we’ve added new capabilities to synchronize and manage passwords. Businesses can manage password policies (e.g. password strength, reset intervals, etc.) using AD and then synchronize from AD to Google Apps when passwords are changed. Passwords are transmitted hashed and encrypted during synchronization.

Gmail Setup

service/googleapps/googleappsgeneral.txt · Last modified: 2023/10/15 23:03 by superwizard