Syncing groups to G Suite from AD

[ComboSmith]

Hi all,

 

Has anybody had experience with syncing to G Suite? We are trying to sync across groups, and nothing else. We are going to use a third party tool to manage the groups and assign them to classes in google classroom, but getting the groups to sync across without transferring our domain to google seems to be very difficult. If anybody can point us in the right direction I'll be very grateful

 

Thanks

[mavhc]

Do you have GCDS already installed? Do your users have their GSuite email addresses in AD?

[ComboSmith]

It's installed but nothing has been synced yet. We're just trying to sync an empty group for testing at the minute

[3s-gtech]

What exactly do you mean by groups, as they mean different things in different contexts, like security and distribution groups in AD or groups in G Suite.

 

We sync everyone across to G Suite from Azure, so no GCDS and SSO via Azure. I use separate Azure apps to do this - one for users, and one for groups.

[mavhc]

You can set up GCDS and just tick groups to sync

[ComboSmith]

You can set up GCDS and just tick groups to sync

That is what we've done, however we keep getting an error saying that api access was forbidden even though we have allowed everything it asks for. It seems to sync users no problem but not groups

[ComboSmith]

What exactly do you mean by groups, as they mean different things in different contexts, like security and distribution groups in AD or groups in G Suite.

 

We sync everyone across to G Suite from Azure, so no GCDS and SSO via Azure. I use separate Azure apps to do this - one for users, and one for groups.

AD security groups, we get an api access forbidden error for groups but not users

[mavhc]

Interesting, I suggest phoning google support, you should have an access PIN in your admin console, they were helpful when I had issues

[MS2011]

Do you have GCDS already installed? Do your users have their GSuite email addresses in AD?

 

Hi

 

Is it possible to setup google classroom without moving to gsuite email?

 

Thanks

[3s-gtech]

Yes, absolutely.

[mavhc]

Yes, do your users have email elsewhere? Google will follow the MX DNS settings

[MS2011]

Yes, do your users have email elsewhere? Google will follow the MX DNS settings

 

Email running on onprem exchange. Is there any guidance out there how to setup?

[mavhc]

Should just be a case of not enabling gmail

[slugshead]

I tried this when we initially went to G-Suite 2 years ago, had no end of hassle trying to get it to work properly.

 

I ended up exporting from Exchange into a CSV and uploading that. Yes it's caused a lot of duplication of work over time with creating user accounts, but it's not that bad and hey, it works.

[Michael]

If you open a Security group in AD, on the General tab, have you populated the email field?

 

Here's how to make your Exchange server work with G Suite. You do need to leave Gmail enabled, as Classroom uses functions/GUI of Gmail but will look to the DNS MX rule.

 

Even if someone opened up the Gmail app and sent an email, any replies would end up on your Exchange server.

 

I've written about GCDS + GSPS vs AAD. I've also linked to the YouTube clip I used for reference.

[MS2011]

If you open a Security group in AD, on the General tab, have you populated the email field?

 

Here's how to make your Exchange server work with G Suite. You do need to leave Gmail enabled, as Classroom uses functions/GUI of Gmail but will look to the DNS MX rule.

 

Even if someone opened up the Gmail app and sent an email, any replies would end up on your Exchange server.

 

I've written about GCDS + GSPS vs AAD. I've also linked to the YouTube clip I used for reference.

 

Many thanks !