+ Post New Thread
Results 1 to 11 of 11
Cloud Services Thread, Google Apps rollout over Summer in Technical; Hi all I am hoping to rollout Google Apps for my school of 1400 users. I have successfully configured Frog ...
  1. #1

    Join Date
    Dec 2011
    Posts
    408
    Thank Post
    372
    Thanked 45 Times in 33 Posts
    Rep Power
    14

    Google Apps rollout over Summer

    Hi all

    I am hoping to rollout Google Apps for my school of 1400 users.

    I have successfully configured Frog for SSO but unfortunately it does not integrate with Google Drive.

    I am looking at maybe using GADS to create users, I am reading through the docs but any gotchas ? Is it just a matter of installing GADS and syncing with my OUs (they are neatly setup by year groups) also I am using a separate domain (ie school staff sticks to the original school domain and students use the new domain for Google apps and gmail) would this be an issue? Or should I stick to Frog SSO and wait till they integrate Google Drive properly?

    Thanks as always

    Wil

  2. #2
    robjduk's Avatar
    Join Date
    Jun 2011
    Posts
    523
    Thank Post
    25
    Thanked 76 Times in 59 Posts
    Rep Power
    26
    GADS is a pleasure to setup really. just don't do what I did and forget to save the carefully created profile. Personally I don't see why you would want to separate the domains up but I have been drinking a little and maybe missing something.

  3. Thanks to robjduk from:

    MrWu (22nd July 2013)

  4. #3

    seawolf's Avatar
    Join Date
    Jan 2010
    Posts
    969
    Thank Post
    12
    Thanked 287 Times in 219 Posts
    Blog Entries
    1
    Rep Power
    176
    Gotchas are to be very careful with your sync rules for creating, suspending, and deleting accounts. We have some OUs that contain accounts we only use for authentication and not email, so those shouldn't be picked up by GADS, etc.

    We use two different email domains for students and staff. We used to have a single one, but then we had the problem of people guessing staff email addresses and students receiving email meant for a teacher (ghhhrrr). The two domains solves that problem, but not the ignorance that caused it (guessing, not asking).

  5. Thanks to seawolf from:

    MrWu (22nd July 2013)

  6. #4

    Join Date
    Apr 2007
    Location
    Sutton Coldfield
    Posts
    208
    Thank Post
    29
    Thanked 34 Times in 28 Posts
    Rep Power
    21
    Hello,

    Like yourself, we use FROG and previously used the FROG/GOOGLE SSO option but was limited by its lack of support for GDrive etc.

    Anyway, I installed and configured the DirSync and Password Sync tools and killed the link within FROG for the generation of user accounts this way. Seems to work very well this way and we get the full functionality of everything.

    Thanks,

    Rob

  7. Thanks to robknowles from:

    MrWu (22nd July 2013)

  8. #5

    Join Date
    Dec 2011
    Posts
    408
    Thank Post
    372
    Thanked 45 Times in 33 Posts
    Rep Power
    14
    Thank you all

    Yes the reason having two seperate domains are:

    Our existing school domain is already being used for Exchange and staff will stay with that email domain

    We did not want staff or students with same email domain name to avoid confusion and errors

    Will look into GAD and GAPS...

    Is there any performance issues loading GAPS on all the DCs? Always a bit worried about adding third party stuff on DCs.

    Our Google Apps domain is mwschool.co.uk and my schools main domain is mrwuschool.co.UK..I presume when GAD is run it will generate users as...username@mwschool.co.uk and users log on with the Google aoos username and their AD password?

    How do you manage the address book for teachers and students? Do you upload students Google address book into Exchange or do you setup a Google apps email address for teachers too so communication is done entirely through google between teachers and students?

    Thanks as always

  9. #6

    seawolf's Avatar
    Join Date
    Jan 2010
    Posts
    969
    Thank Post
    12
    Thanked 287 Times in 219 Posts
    Blog Entries
    1
    Rep Power
    176
    I haven't seen any performance issues with GAPS, although I have seen some potential issues in using it with multiple AD servers (it worked reliably with 2, but not 3 for us).

    GADS will sync whatever OUs you specify and it will create user accounts based on the email address you put in the email address field of the user in AD. This is how we are able to use the same GADS to sync users for two different domains.
    Last edited by seawolf; 22nd July 2013 at 11:14 PM.

  10. Thanks to seawolf from:

    MrWu (23rd July 2013)

  11. #7

    Join Date
    Dec 2011
    Posts
    408
    Thank Post
    372
    Thanked 45 Times in 33 Posts
    Rep Power
    14
    Thanks seawolf

    So if our students have no email address field in AD (they have a VLE email address that is separate and we are phasing out) would Google apps just generate student username@mwschool.co.uk as email and username if the domain mwschool.co.uk is the primary domain for google apps?

    Thanks

  12. #8

    Join Date
    May 2010
    Posts
    1,176
    Thank Post
    113
    Thanked 104 Times in 79 Posts
    Rep Power
    52
    No it would just ignore it, only creates accounts with an email address for the user (well it does for me using gads)

  13. Thanks to caffrey from:

    MrWu (23rd July 2013)

  14. #9

    Join Date
    Dec 2011
    Posts
    408
    Thank Post
    372
    Thanked 45 Times in 33 Posts
    Rep Power
    14
    Thanks caffery,

    So if the AD entry for students are blank, when I run GADS against it, it will still create a google app account with the username and a gmail account? in my case would be user.name@mwschool.co.uk (google apps primary domain)


    Cheers!

  15. #10

    Join Date
    May 2010
    Posts
    1,176
    Thank Post
    113
    Thanked 104 Times in 79 Posts
    Rep Power
    52
    Nope if it's blank the account won't be created, you get a sync report so you know if it's worked or not.
    I just have to remember instead of going to exchange and creating a mailbox, I need to fill in the email address in the general tab in AD.
    Best bet is just to play, and use simulate sync in GADs. The biggest issue with me to sort out was the groupings - GADs doesn't appear to like mail enabled security groups, especially if they are nested - I just redid everything in AD first.

  16. #11

    seawolf's Avatar
    Join Date
    Jan 2010
    Posts
    969
    Thank Post
    12
    Thanked 287 Times in 219 Posts
    Blog Entries
    1
    Rep Power
    176
    Quote Originally Posted by caffrey View Post
    Nope if it's blank the account won't be created, you get a sync report so you know if it's worked or not.
    I just have to remember instead of going to exchange and creating a mailbox, I need to fill in the email address in the general tab in AD.
    Best bet is just to play, and use simulate sync in GADs. The biggest issue with me to sort out was the groupings - GADs doesn't appear to like mail enabled security groups, especially if they are nested - I just redid everything in AD first.
    Nope, GADS doesn't handle nested groups in my experience either. Kind of a pain, but you just have to deal with and move on. Doing a simulated sync is definitely recommended before doing the real thing. If we hadn't done that, we would have deleted half of our users in GApps with our first sync attempt (had a few sync rules out of whack).



SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 2
    Last Post: 22nd February 2013, 10:30 AM
  2. Google Apps
    By kennysarmy in forum Windows
    Replies: 10
    Last Post: 23rd January 2009, 11:31 AM
  3. Replies: 12
    Last Post: 10th October 2008, 07:32 AM
  4. google apps
    By alonebfg in forum Virtual Learning Platforms
    Replies: 8
    Last Post: 3rd April 2008, 10:16 PM
  5. Replies: 17
    Last Post: 4th August 2005, 12:21 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •