Google Apps - Is it possible to stop primary students emailing staff using Sub domain

[edutech4schools]

We would like to get the older pupils at our primary school using Google Apps but the Head does not want the pupils to see the staff email addresses or be able to email them. I explained that Google apps is built on the fact that sharing files is done using email addresses and the HT has come back saying it might be possible if I set up another domain inside the current domain and add the pupils to this other sub domain.

 

I have not mucked about with the domain settings in Google Apps before, as I am a bit concerned about the knock on effects, but wondered if this would work?

[Ausy]

I am going to try this myself over the next few weeks. I found this information but have not tried it yet.

 

https://support.google.com/a/answer/2640542?hl=en

[jtoland]

You can set it up so students can access apps but not allow them to use Gmail or is Gmail the app the head wants them to use

[rogerdnixon]

If you add a subdomain it essentially allows you to create users with a different domain at the end of their email address. If you put all these users into a different sub-OU you can then apply specific email policies to them. So you can restrict who they can email. For example, our feeder primaries are sub-domains of our main domain. The primary school pupils are in sub-OU's that have a policy applied that limits them to sending or receiving emails to just their sub-domain - a walled garden. Our students have a policy applied that prevents them from emailing the primary sub-domains. It all works very well. All done in the the 'Compliance' section of Gmail settings - in particular 'Content Compliance' and 'Restrict Delivery'.

 

They only way for them not to be able to 'see' email addresses of teachers would be to remove the teacher users from the directory listing - not generally a good thing to do. However, the point of Google Apps is allowing teachers to share and collaborate easily - so I'm not sure why you would want to hide them. The other thing to note is that Google Classroom does not like having teachers and students on different domains - I'd generally not recommend having students and teachers in a single institution on different domains.

[edutech4schools]

I am going to try this myself over the next few weeks. I found this information but have not tried it yet.

 

https://support.google.com/a/answer/2640542?hl=en

 

Looks like I might be able to do part of the restricting using OU restrictions. Thanks.

 

If you add a subdomain it essentially allows you to create users with a different domain at the end of their email address.

Would this also need MX records etc being created with the sub domain info?

[rogerdnixon]

Yes - you need to add the Google MX records to the domain hosting for email to work. The MX records are in Gmail settings - just cut and paste them into the place for MX records wherever the domain is hosted. You will also need to prove domain ownwership when you add the sub-domain.

[edutech4schools]

Yes - you need to add the Google MX records to the domain hosting for email to work. The MX records are in Gmail settings - just cut and paste them into the place for MX records wherever the domain is hosted. You will also need to prove domain ownwership when you add the sub-domain.

 

Ah thanks. We do not have control of our domain records and have to go through a lengthy process to get anything changed. Not so good if you want to simply test something.

[jonathon28]

Just doing this myself.

 

Created a sub-domain 'student.school.bham.sch.uk' and got to bulk upload student accounts.

 

On Google Apps there is minimum length of 8 characters, is this still the same if you bulk upload?

 

Also, how do you deal with passwords for your students? hand them out on a card? Give teachers a list? I was looking at possibly AD integration so they log straight into their email account. (We are a special school).

 

Cheers,