Google Certified Educator (GCE)
Random


Click random to get a fresh chapter.

Google Workspace Administration Review Notes




Deleting a Temporary Google Workspace User Account
Select 'Transfer' in user deletion process to transfer Drive documents to manager

Reviewing Third-Party Apps Access
Open Admin Console > Security > API Controls > App Access Control > Manage Third-Party App Access

Gaining Visibility into Actions by Google Staff
Go to Google Admin Panel > Audit > Access Transparency Logs

Additional Anti-Malware Protection
Enable Security Sandbox for extra anti-malware protection in Gmail

Auditing Access to Sensitive Documents
Open Security Investigation Tool > Drive Log Events > Add conditions: Visibility Is External, Actor Is

Spoofing Protection and Quarantined Emails
Change spoofing protection to deliver emails with custom warning instead of quarantining

Inbound Messages Classified as Spam
Add sender's domain to allowlist via approved senders in Admin Console

Stolen Credentials and Defense-in-Depth Strategy
Use Context-Aware Access to deny access from geo-locations outside organization

Creating a Vacation Calendar
Create secondary calendar with 'Make changes to events' access for team members

Sharing Financial Reports with External Auditor
Enable 'Visitor Sharing' feature for secure sharing with collaborators without Google Workspace or Gmail account

Preventing Accidental Oversharing in Google Drive
Determine sharing boundaries for users working with sensitive information and implement target audiences

Alleviating Drive Storage Quota Concerns
Transfer ownership of Drive objects to another user and move affected items to Shared Drive

Blocking Access Until Migrations are Complete
Use Context-Aware Access to simultaneously block access for all users except allowed users

Adding New Company Employees to Existing Google Workspace Domain
Redesign OU organization with 2 child OUs for each company and define custom directories

Preventing Internal Messages from Going to Gmail Spam
Configure inbound gateway with Exchange server IP addresses

Troubleshooting Gmail Labels and Buttons Issue
Check if issue occurs on different device or new incognito window

Monitoring Ongoing Employee Security Investigations
Create 'Custom Role' with Google Vault management abilities

Secure External Sharing for Finance and HR Teams
Create group with finance and HR users for controlled external sharing

Google Drive Access Issue in Satellite Office
Access level defined based on IP range via Context-Aware Access

Troubleshooting Mail Delivery Issues
Use Email Log Search to review message headers

Supporting a Legal Investigation
Create hold on user's mailbox in Google Vault and create matter to share with litigation team

Retrieving Emails and Google Drive Documents for Legal Investigation
Utilize Google Vault to hold, search, and export data for legal team

Enforcing TLS with a Particular Domain
Set up secure transport compliance with receiving domain

Migrating Startup Employees to Existing Google Workspace Domain
Create secondary domain within current domain and set up DNS records

Preventing Widespread Deletions in Google Cloud Directory Sync
Configure limits for maximum number of deletions on each synchronization

Deploying Second Instance of GCDS
Set up additional instance of GCDS on another server and handle synchronization for acquired organization

Replying on Behalf of a Google Group
Add group as email address that can be sent from within Gmail and verify user access

Alleviating Concerns About Legacy Microsoft Office Documents
Demonstrate ability to convert Office documents to native Google file format from Drive

Fulfilling Legal Request for MBOX File
Create Google Vault matter, search for data, and run export for legal department

Troubleshooting Password Sync Issue
Confirm Password Sync service is running on all domain controllers

Additional Layer of Protection for Sales Team
Configure security sandbox feature on sales team organizational unit

Blocking Access for Unapproved Users
Create configuration group with approved users and enable external sharing for this group

Gathering Logs for 500 Error in Gmail
Open Developer Tools > Network Tab > Export HAR

Restricting Room Booking to Management and EAs
Modify room calendar sharing settings to limit to management and EAs group

Configuring Sharing Policies for Acquired Companies
Use 'Trusted Domains' feature to let users share files between companies

HR Access to Work Insights
Confirm Work Insights API is set to 'unrestricted'

Restricting Consultant's Access to Contacts
Create isolated OU for consultants and group for restricted contacts access

Investigating Intellectual Property Leak
Instruct Google Vault admin to create matter and place user data on 'hold'

Preventing Profanity in Emails
Configure objectionable content rule

Preventing Data Exfiltration on iOS Devices
Turn on 'Advanced Mobile Management' and clear 'allow items created with managed apps to open in unmanaged apps' checkbox

Preventing Sensitive Information Sharing in Google Group
Configure group with new member post moderation

Managing Licensing in a High Turnover Organization
Create license assignment rule based on directory attributes

Assigning Conversations to Different Receptionists
Create Google Groups Collaborative Inbox

Preventing Phishing Attacks
Configure spoofing and authentication controls to warn or quarantine threatening messages

Avoiding 503 Error in API Calls
Use exponential back-off algorithm to retry failed requests

Unusual Sign-In Pattern
Investigate account for unauthorized activity in Login and Security Audit Log

Whitelisting IP Addresses for Email
Set up email allowlist

Granting Google Vault Access to External Authority
Create accounts for external users and assign Vault privileges

Initial Steps for iOS Mobile Device Management
Configure Apple Push Certificate and use work address for future access

Removing Dependencies on Active Directory
Build application to fetch updated data from HRIS system and update Google Workspace with Directory API

Locating Issues with Meet Quality
Use Meet quality tool to review output for quality issues

Configuring Google Group as Collaborative Inbox
Assign required Groups permissions to help desk team members

Enforcing Security Measures for User Accounts
Deploy 2-Step Verification for users with security keys and subscribe to Cloud Identity Premium

Ensuring Security of Attachments in Gmail
Enable virtual execution of attachments in security sandbox

Troubleshooting Automatic Room Replacement
Note that automatic room replacement does not work on recurring events

Locating Missing Email
Provide sender's email address, subject, and date/time of missing message

Setting Up Shared Drive for Collaboration
Create shared drive and add users as contributors

Managing 2-Step Verification for Sign-In Issues
Temporarily move affected users to exception group to set up 2-Step Verification

Configuring Room Release Settings
Set 'Allow calendar-based room release' option for targeted rooms

Adding Acquired Domain to Google Workspace
Add acquired domain as secondary domain and update email information of new users

Configuring OAuth Client ID for Google Drive
Add OAuth Client ID to Google Drive Trusted List

Recovering Recently Deleted User
Filter for 'recently deleted' in Admin Console and recover user

Quarantining Suspicious Messages
Enable safety rule to send suspicious messages to quarantine

Configuring Inbound Gateway for Product IP Addresses
List IP addresses of product as Inbound Gateway

Enabling Google Drive for Desktop on Authorized Devices
Configure Google Drive for Desktop to only allow on authorized devices and create company-owned device inventory

Troubleshooting SAML Assertion Mismatch
Verify Audience element in SAML Response matches ACS URL

Resolving SAML Username Conflict
Resolve conflict between SAML assertion and current username configured in Google Workspace

Handling Unencrypted Emails
Display warning banner on unencrypted messages

Exporting Data from Google Vault
Repeat original search and export data again

Giving Admin Privileges for Gmail Quarantine
Give users Gmail Admin Quarantine privileges

Defining Work Locations for Users
Define users' work locations with building ID, floor name, and section

Installing Google Credential Provider for Windows
Install and configure GCPW on each device