TIP GOOGLE WORKSPACE

TẠO CHỮ KÍ CHO 1 OU

1. Sign in to your Google Admin console.

   Sign in using an administrator account, not your current account letr0ngnghia01@gmail.com
2. From the Admin console Home page, go to AppsGoogle WorkspaceGmailCompliance.

   Note: You might find this setting at AppsGoogle WorkspaceGmailAdvanced Settings.

3. On the left, select an organization.
4. Scroll to the Append footer setting in the Compliance section. Point to the setting, and click Configure. If the setting is already configured, click Edit or Add another. 
5. Enter the footer text:
   • You can enter up to 10,000 characters.
   • To customize the text appearance, use the text formatting tools. The text editor doesn't support HTML content.
   • To insert an image, click  and enter the URL for the image on a public web server. Images stored in Google Drive can't be used in your footer.
6. (Optional) Select append the footer to internal messages being sent within your organization.
7. Click Add Setting or Save. Any new settings are added to the Compliance settings page.
8. At the bottom, click Save. It can take up to 24 hours for changes to take effect.
9. Test the footer by sending a message to an email address outside your domain.

Hình cảnh báo liên quan đến các cuộc tấn công lừa đảo?

1. Sign in to your Google Admin console.

   Sign in using an administrator account, not your current account letr0ngnghia01@gmail.com
2. From the Admin console Home page, go to Menu   Security  Alert center.
3. To view more details, click any item on the page to open the alert details page.
   
   From the alert details page, you can view details about an alert, delete an alert, access details about the rule that generated the alert, and take other actions.

Note: The alert center doesn’t display timezone details. Times in the alert center are formatted to your Google Admin console timezone preference.

Bạn cần bảo vệ các tài khoản người dùng rất nhạy cảm khỏi bị truy cập trái phép! Tạo xác thực 2 bước

Step 1: Create an exempt from 2-Step Verification exception group

1. Sign in to your Google Admin console.

   Sign in using an administrator account, not your current account letr0ngnghia01@gmail.com
2. Create the group in the Admin console or Google Cloud Directory Sync. 
3. Add the users who aren’t required to use 2-Step Verification to the group.  

Step 2: Turn off enforcement for the exception group

1. From the Admin console Home page, go to Security2-Step Verification.

2. On the left, select your top-level organization.
3. In the Groups section, enter the name of exception group you created.
4. Let users turn on 2-Step Verification and use any verification method, but don't require 2-Step Verification yet. Check Allow users to turn on 2-Step Verification and select Enforcement > Off.

Step 3: Move enrolled users out of the exception group

1. From the Admin console Home page, go to Reports.
2. On the left, click Users > Security to see which users are enrolled in 2-Step Verification.
   This data could be delayed up to 48 hours. To view real-time 2-Step Verification status for each user, see Manage a user’s security settings.
3. When a member of the Exempt from 2-Step Verification exception group enrolls in 2-Step Verification, remove them from the exception group and move them into the appropriate organization.

Công ty của bạn đã quyết định thay đổi nhà cung cấp SSO.  Thay vì xác thực vào G Suite và các dịch vụ đám mây khác bằng hệ thống SSO bên ngoài, giờ đây bạn sẽ sử dụng Google làm Nhà cung cấp danh tính (IDP) và nhà cung cấp SSO cho các dịch vụ đám mây bên thứ ba khác của mình.  Hai tính năng nào cần thiết để định cấu hình lại trong G Suite?

https://support.google.com/a/answer/60224?hl=en

Apps > add SAML apps to your domain

Replace the third-party IDP verification certificate.

Quản lí Google Chrome Update Tự động

Reference: https://support.google.com/chrome/a/answer/3168106?hl=en

1. Sign in to your Google Admin console.

   Sign in using an administrator account, not your current account letr0ngnghia01@gmail.com
2. From the Admin console Home page, go to DevicesChrome.
3. Click SettingsDevice.
4. To apply the setting to all devices, leave the top organizational unit selected. Otherwise, select a child organizational unit.
5. Go to Device update settingsAuto-update settings.
6. From the Device updates menu, select Block updates.
7. Click Save.

Cho phép User tự Reset Password

1. Sign in to your Google Admin console.

   Sign in using an administrator account, not your current account letr0ngnghia01@gmail.com
2. From the Admin console Home page, go to SecurityAccount recovery.
3. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit or a configuration group.
4. Click User account recovery.
5. Click Allow users and non-super admins to recover their account. This setting won't apply if your organization use single sign-on (SSO) with a third-party identity provider or G Suite Password Sync.
6. Tell users to set up a recovery phone number or email address where they can receive password recovery instructions.