Setting up Google Apps - Syncing with AD questions
I'm looking ahead but am going to be introducing Google Apps into my secondary school over the next few months.
I've just started to read up on it and watch webinars etc.
I'm running AD and am planning on using the Google directory sync tool to sync between Active Directory and Google.
Question 1: Do users in Active directory have to have an attribute set under email address in order to populate google apps? I think that's what the guy was saying in the webinar was needed but my users don't have anything written in AD for the email address. Will this be a problem or will all my users create ok and then get their gmail address?
Question 2: What's the easiest way to sync the passwords between AD and Google. I'm planning on disabling the users ability to change the password in Google but want it so that when their password is changed in AD it syncs to Google. From what I understand Google Directory sync tool is unable to read the encrypted passwords from AD?
My big plan is actually to have single sign on setup so that when they login to Windows it automatically signs them into Google Apps, has anyone had any problems achieving this?