flyinghaggis Posted March 5, 2018 Posted March 5, 2018 I believe you can set a cloud Chrome policy to block staff from using File Stream. However I think it's an enable/disable setting per user so it wouldn't offer any granularity if you want staff using it on certain computers but not others. It would be nice if there were the option to allow staff to use it on school computers but not their own personal devices.
FN-GM Posted March 5, 2018 Posted March 5, 2018 If you use ADFS there is a way via claims rules to stop the login. Not sure how to set them up though.
TwistedHelixis Posted March 19, 2018 Posted March 19, 2018 I believe you can set a cloud Chrome policy to block staff from using File Stream. However I think it's an enable/disable setting per user so it wouldn't offer any granularity if you want staff using it on certain computers but not others. Some sort of white-list for computers that are allowed to install File Stream or Google Backup and sync would be perfect.
FN-GM Posted March 19, 2018 Posted March 19, 2018 Some sort of white-list for computers that are allowed to install File Stream or Google Backup and sync would be perfect. Not when you have a few thousand machines!
TwistedHelixis Posted March 19, 2018 Posted March 19, 2018 What about a certificate that could be mass deployed, and file stream would only run if it found that cert. This would be handy
FN-GM Posted March 19, 2018 Posted March 19, 2018 What about a certificate that could be mass deployed, and file stream would only run if it found that cert. This would be handyThat would make sense.
fiza Posted March 20, 2018 Author Posted March 20, 2018 That's my main concern with File Stream. Once you enable it for your domain then users can install it at home on computers that you have no control over. Which could be vulnerable to all sorts of malware/ransomware that could quite easily reach Google Drive through the mapped File Stream drive.
DGardiner Posted March 20, 2018 Posted March 20, 2018 That's my main concern with File Stream. Once you enable it for your domain then users can install it at home on computers that you have no control over. Which could be vulnerable to all sorts of malware/ransomware that could quite easily reach Google Drive through the mapped File Stream drive. ive set ours to allow no local files to be stored, allows its use without leaving any data - but true regarding the mapped drive thing
Zoom7000 Posted March 21, 2018 Posted March 21, 2018 (edited) That's my main concern with File Stream. Once you enable it for your domain then users can install it at home on computers that you have no control over. Which could be vulnerable to all sorts of malware/ransomware that could quite easily reach Google Drive through the mapped File Stream drive. I've completely disabled Drive File Stream for this very reason. I asked Google whether it was possible for a ransomware attack to infect and encrypt our data. They said that they have not had any reports of any attacks, but couldn't guarantee it wasn't possible. I'd rather be safe than sorry, so I've disabled it for our domain completely. I'd rather staff just used the web browser to access their files, than me having to invest in something like backupify or spin backup for a hefty cost! Edited March 21, 2018 by Zoom7000
tj2419 Posted March 23, 2018 Posted March 23, 2018 Might be being really slow here but where can you configure proxy settings for file stream?
TwistedHelixis Posted June 5, 2018 Posted June 5, 2018 (edited) Can everyone vote on this feature idea. Basically locks or warns the user when a file like Word is already open by another user and stops file data loss. https://www.cloudconnectcommunity.com/ccc/ls/community/g-suite-chrome-feature-ideas/post/4945156247912448 Edited June 5, 2018 by TwistedHelixis
Dwigt Posted June 5, 2018 Posted June 5, 2018 Can everyone vote on this feature idea. Basically locks or warns the user when a file like Word is already open by another user and stops file data loss. https://www.cloudconnectcommunity.com/ccc/ls/community/g-suite-chrome-feature-ideas/post/4945156247912448 voted surprised this wasn't already in
bligh001g Posted November 14, 2018 Posted November 14, 2018 Hi all, we are looking at this now but 2 questions from my network manager if anyone can help?! How often does it sync? Is it doing live updates and what impact will that have on our internal bandwidth? Does it impact the computer resources? I’ve copied and pasted these from an email so not sure what the last one means?! Thanks
DGardiner Posted November 14, 2018 Posted November 14, 2018 Hi all, we are looking at this now but 2 questions from my network manager if anyone can help?! How often does it sync? Is it doing live updates and what impact will that have on our internal bandwidth? Does it impact the computer resources? I’ve copied and pasted these from an email so not sure what the last one means?! Thanks we have ours set to only allow online storage to file upload/retreival is done on demand and ive never noticed an issues with regards to computer resources at all though if you get them to surrender usb pens and stuff the initial upload can be a nice wait for the end user depending on your internet
Shadow_Walker Posted February 5, 2019 Posted February 5, 2019 Might have missed it but has SSO been sorted yet so teachers don't need to put their email in again on a new computer in filestream?
Arthur Posted February 6, 2019 Posted February 6, 2019 Might have missed it but has SSO been sorted yet so teachers don't need to put their email in again on a new computer in filestream? No SSO yet... https://support.google.com/a/answer/7577057?hl=en&ref_topic=7455083
Arthur Posted February 6, 2019 Posted February 6, 2019 Might have missed it but has SSO been sorted yet so teachers don't need to put their email in again on a new computer in filestream? Just found this.. https://support.google.com/a/answer/7644837
azc Posted February 6, 2019 Posted February 6, 2019 I've just given this a try. It forces Drive File Stream to open a web browser to sign in. However, it is directed to the standard Google account sign in page. Unless I'm doing something wrong, for the automatic sign-in to work it needs to go to https://drive.google.com/a/[domain]
Arthur Posted April 10, 2019 Posted April 10, 2019 Some sort of white-list for computers that are allowed to install File Stream or Google Backup and sync would be perfect. That's my main concern with File Stream. Once you enable it for your domain then users can install it at home on computers that you have no control over. Which could be vulnerable to all sorts of malware/ransomware that could quite easily reach Google Drive through the mapped File Stream drive. Click the link for more details. Get extra visibility and control over how Drive File Stream is used in your organization What’s changing We’re giving admins more control over their corporate data by integrating controls for Drive File Stream into Google’s device management interface. Drive File Stream streams data between devices and the cloud to ensure users can access the files they need safely and efficiently whether they’re online or offline. Device management helps you easily manage and protect corporate data on devices. This integration will allow admins to: Control which devices can use Drive File Stream by restricting use to company-owned devices only. See the status of Drive File Stream on a device (size of the offline content cache, software version, time of last sync etc.). Remotely block the device and wipe the account specific offline content cache from a machine should it become lost or they no longer want Drive File Stream to be used on the device. 2
DSapseid Posted June 14, 2019 Posted June 14, 2019 Has anyone restricted the size of the cache on the machines using the registry entry from the google guide? https://support.google.com/a/answer/7644837 It is currently capped at 20% of the hard drive but on shared machines this could cause issues if its 20% per user!
jawebber Posted December 4, 2019 Posted December 4, 2019 Morning all, Is anyone deploying File Stream across their site successfully? I've packaged it as an MSI, but every time someone logs into drive we get the Welcome to Google File Stream box. Is there a registry key I can set to stop this? Thanks!
fiza Posted December 6, 2019 Author Posted December 6, 2019 Looks like limiting File Stream to School owned Devices is finally here. Restrict the use of Drive File Stream to company-owned devices Quick launch summary Earlier this year, we gave admins more control over their corporate data by integrating controls for Drive File Stream in Google’s device management interface. The option to restrict the use of Drive File Stream to company owned-devices only is now available to opt into. Admins can access the setting by going to the Admin console and navigating to Apps > G Suite > Settings for Drive and Docs > Features and Applications. Then, select “Allow Drive File Stream in your Organization” and “Only allow Drive File Stream on authorized devices (Beta)". Availability G Suite editions Available to all G Suite editions On/off by default? This feature will be OFF by default and can be enabled at the OU level. [/color] 2
Ditto Posted December 6, 2019 Posted December 6, 2019 A useful addition, but I can hear the complaints already when it's turned on. It would be interesting to speak to your DPO and see if they want the functionality turned on by default as a matter of data protection policy.
TwistedHelixis Posted December 6, 2019 Posted December 6, 2019 Next to workout is how does G Suite now the difference between a school owned laptop and a personal one. Last time I looked this involved a bit more than just ticking a box.
TwistedHelixis Posted December 6, 2019 Posted December 6, 2019 OK, so it looks like you just need to add the serial number of the device you want added. Something to test out next week 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now