+ Post New Thread
Results 1 to 15 of 15
Internet Related/Filtering/Firewall Thread, Locked out of Google Apps in Technical; I have done some thing really stupid. when using the google apps directory sync tool i didn't excluded the admin ...
  1. #1
    ticker's Avatar
    Join Date
    Mar 2006
    Location
    Waterfoot, Rossendale
    Posts
    283
    Thank Post
    42
    Thanked 13 Times in 12 Posts
    Rep Power
    19

    Locked out of Google Apps

    I have done some thing really stupid. when using the google apps directory sync tool i didn't excluded the admin account and its now disabled. Anyone else done this and been able to re-enable the account.

  2. #2

    Join Date
    Aug 2008
    Posts
    28
    Thank Post
    0
    Thanked 2 Times in 2 Posts
    Rep Power
    12
    Hi there,

    I did exactly the same thing yesterday. I went to this address:

    Contact Us - Google Apps Help

    and explained what had happened. I got an email less than an hour later from someone saying they'd reactivated the account. EXCELLENT customer service I must say. What a relief!

    Chriss

  3. Thanks to Chriss31 from:

    ticker (17th March 2011)

  4. #3
    ticker's Avatar
    Join Date
    Mar 2006
    Location
    Waterfoot, Rossendale
    Posts
    283
    Thank Post
    42
    Thanked 13 Times in 12 Posts
    Rep Power
    19
    Cheers, contacted them also found a forum and it looks like i am not the only one that has done this.

    Quote Originally Posted by Chriss31 View Post
    Hi there,

    I did exactly the same thing yesterday. I went to this address:

    Contact Us - Google Apps Help

    and explained what had happened. I got an email less than an hour later from someone saying they'd reactivated the account. EXCELLENT customer service I must say. What a relief!

    Chriss

  5. #4

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,392
    Thank Post
    797
    Thanked 1,588 Times in 1,391 Posts
    Blog Entries
    10
    Rep Power
    427
    Off topic but let me know how you get on with the sync and stuff please :-)

  6. #5

    Join Date
    Aug 2008
    Posts
    28
    Thank Post
    0
    Thanked 2 Times in 2 Posts
    Rep Power
    12
    You're not even close to being the only one. All forum entries I found suggested it would take weeks to resolve, so I was very pleasantly surprised when it was fixed an hour later.

  7. #6

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,392
    Thank Post
    797
    Thanked 1,588 Times in 1,391 Posts
    Blog Entries
    10
    Rep Power
    427
    If you have google apps for education, you can ring them.

  8. #7
    ticker's Avatar
    Join Date
    Mar 2006
    Location
    Waterfoot, Rossendale
    Posts
    283
    Thank Post
    42
    Thanked 13 Times in 12 Posts
    Rep Power
    19
    The sync went well just takes a bit of time to work through all the settings etc, when i ran the sync it all went well expect for what happend above. so just dont make that mistake.

    Quote Originally Posted by FN-GM View Post
    Off topic but let me know how you get on with the sync and stuff please :-)

  9. #8


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    338
    haha. I did exactly the same thing.
    5 min on phone and they fixed it.

    REMEMBER to exclude certain accounts from sync !

  10. #9

    Join Date
    Aug 2008
    Posts
    28
    Thank Post
    0
    Thanked 2 Times in 2 Posts
    Rep Power
    12
    Has anyone managed to successfully export user account passwords from AD? It's the one thing that's not working correctly at the moment for us.

  11. #10
    InterwebsGuy's Avatar
    Join Date
    Jan 2011
    Posts
    210
    Thank Post
    51
    Thanked 21 Times in 21 Posts
    Rep Power
    10
    Quote Originally Posted by Chriss31 View Post
    Has anyone managed to successfully export user account passwords from AD? It's the one thing that's not working correctly at the moment for us.
    The only way this can be done if I remember rightly, is if you have the option ticked in AD to store unhashed passwords.
    Some form of SSO using Shib or CAS would be a better solution but is a nightmare to setup.

  12. #11
    Oops_my_bad's Avatar
    Join Date
    Jan 2007
    Location
    Man chest hair
    Posts
    1,738
    Thank Post
    438
    Thanked 53 Times in 50 Posts
    Rep Power
    29
    Gosh, I smiled when I saw this topic - have foolishly managed to do this several times :/

    Quote Originally Posted by Chriss31 View Post
    Has anyone managed to successfully export user account passwords from AD? It's the one thing that's not working correctly at the moment for us.
    All you need is here:

    sha1hexfltr - Active Directory sha1 hex password filter - Google Project Hosting

    This is the most secure way of doing it. Only drawback is you'll need to get your users to change their passwords for AD to capture and hash their passwords following install on your DC(s). You then sync this hash using Google/Postini directory sync, it's usually stored in the "division" attribute of the user object.

    Any probs post back.

  13. #12

    Join Date
    Aug 2008
    Posts
    28
    Thank Post
    0
    Thanked 2 Times in 2 Posts
    Rep Power
    12
    Quote Originally Posted by Oops_my_bad View Post
    Gosh, I smiled when I saw this topic - have foolishly managed to do this several times :/



    All you need is here:

    sha1hexfltr - Active Directory sha1 hex password filter - Google Project Hosting

    This is the most secure way of doing it. Only drawback is you'll need to get your users to change their passwords for AD to capture and hash their passwords following install on your DC(s). You then sync this hash using Google/Postini directory sync, it's usually stored in the "division" attribute of the user object.

    Any probs post back.

    I had looked at this as an option, but I think trying to get 1200 students to change their password isn't likely going to end well. Is there a specific technical question as to why Google can't sync passwords at present?

  14. #13
    Oops_my_bad's Avatar
    Join Date
    Jan 2007
    Location
    Man chest hair
    Posts
    1,738
    Thank Post
    438
    Thanked 53 Times in 50 Posts
    Rep Power
    29
    Quote Originally Posted by Chriss31 View Post
    I had looked at this as an option, but I think trying to get 1200 students to change their password isn't likely going to end well. Is there a specific technical question as to why Google can't sync passwords at present?
    I you have a password policy you could have everyones password changed naturally within 2-3 months (ours is 90 days force change).

    I suppose the only other way would be true LDAP auth, but then you have to start punching holes in your firewall

  15. #14
    InterwebsGuy's Avatar
    Join Date
    Jan 2011
    Posts
    210
    Thank Post
    51
    Thanked 21 Times in 21 Posts
    Rep Power
    10
    If you go down the force change password option, or provision an AD password to Google Apps keep in mind they seem to be enforcing the 8 character password minimum now.

    I know for kids - and some staff too - this isn't going to be pretty as they seem in my experience quite incapable of remembering long, stronger passwords.

    As I suggested earlier, some form of SSO is the best bet. Either using something like Shibboleth, CAS or if you run Moodle, through the Moodle Rooms Google Apps auth plugin. The problem with this form of authentication, as you can just set any password for the Google Apps Account, is if you users wish to have their email or calenders on a phone, or use Outlook to manage them.. this is when you need to start managing those users Google Apps passwords individually!

  16. #15

    Join Date
    Aug 2008
    Posts
    28
    Thank Post
    0
    Thanked 2 Times in 2 Posts
    Rep Power
    12
    Quote Originally Posted by InterwebsGuy View Post
    If you go down the force change password option, or provision an AD password to Google Apps keep in mind they seem to be enforcing the 8 character password minimum now.

    I know for kids - and some staff too - this isn't going to be pretty as they seem in my experience quite incapable of remembering long, stronger passwords.

    As I suggested earlier, some form of SSO is the best bet. Either using something like Shibboleth, CAS or if you run Moodle, through the Moodle Rooms Google Apps auth plugin. The problem with this form of authentication, as you can just set any password for the Google Apps Account, is if you users wish to have their email or calenders on a phone, or use Outlook to manage them.. this is when you need to start managing those users Google Apps passwords individually!
    I think I'd be quite happy to investigate implementing some form of SSO setup, however I can't help but feel this would be simply bypassing a step that may end up being quite necessary. (i.e. the ability to import user passwords from AD).

SHARE:
+ Post New Thread

Similar Threads

  1. Google Apps
    By harvester in forum Internet Related/Filtering/Firewall
    Replies: 26
    Last Post: 5th November 2010, 02:19 PM
  2. Replies: 0
    Last Post: 14th September 2010, 09:46 PM
  3. Anyone using Google Apps?
    By GoldenWonder in forum Windows
    Replies: 13
    Last Post: 1st February 2010, 02:47 PM
  4. Google Apps
    By kennysarmy in forum Windows
    Replies: 10
    Last Post: 23rd January 2009, 10:31 AM
  5. google apps
    By alonebfg in forum Virtual Learning Platforms
    Replies: 8
    Last Post: 3rd April 2008, 09:16 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •