GSuite - Prevent students sending to specific Groups and Groups nested within Groups

[timbo343]

Is there a way to prevent specific users sending to a list of specific groups which are acting as distribution groups?

 

As a school we have loads of groups as distribution groups what we don't want students to access or send to yet we would like staff to email without being part of the group.

 

We have looked at Content compliance rules with the following:

 

 

The blacked out address for the purpose of this is Group1 @ domain.com and the permissions are only set to publish - entire organisation so staff can email the group but we need to prevent students sending to the group.

 

The issue now is when another Group (Group2) is nested in Group1 we are getting strange results.

 

Expected:

A. You would have thought that if a student's email address that matches the regex ^[0-9]\d sends an email to the nested group Group2, the users of Group 2 would still receive the email as this is a seperate group.

B. If the same user sends an email to Group1 you'd have thought the email would bounce back to the sender however the sender.

 

However, the expectations aren't true, the result is:

A. The sender receives a bounce back of No No No.

B. The sender does not receive a bounce back and no mail is received by any of the members of Group1.

 

Is there a way round this without using a regex rule for the Groups as using the Group membership that we have configured is neater. If we used a regex, we would need a massive regex to filter all the relevant groups.

 

Would appreciate anyone's thoughts on this, tell me if we have got the wrong end of the stick with the envelope recipients and different ways of achieving this.

 

Google groups needs a complete overhaul in my opinion!

 

Thanks

[RLR]

Not very familiar with this stuff but could it have something to do with you select all the Email types? :Inbound, outbound, internal sending, internal receiving. Surely you just need to have Internet Sending selected?

[gh5000]

I think what you are looking for is the equivalent of exchange distribution groups where you can allow sender's from and specify users or groups. Those users don't have to be members.

 

The only options right now are, restrict so members of the group can only email the group. All in org can email the group. Or use the settings in this guide https://support.google.com/a/answer/2640542?hl=en

I've never tried your way of doing it personally.

 

I last asked about settings similar to exchange to someone at Google and they said it their number one Gmail feature request and would be available "soon"

[timbo343]

I forgot to update on what we are doing with this.

 

One of the MAT techs found this https://www.amplifiedit.com/youve-got-mail/ but never looked at implimenting it. Instead we have used regexs for blocking users sending to groups with a slightly modified the initial regex. We have a few primary schools in our MAT and 2 Secondaries so we have decided that each secondary will maintain their own regex list of groups that students should not be sending to.

 

As for the primaries, we have put a blanket ban on students trying to send to any primary school sub domain of the mat.

 

Also finally found a way via GAM to hide service distribution lists from the directory so users cannot search them and see the external email address.