Stopping external requests to google classrooms

[cgilmour]

Hi,

we're pretty new to GSuite and having rolled out google classrooms to teachers, it appears some teachers are getting requests from external accounts to join the google class. We suspect some students are sharing a class code or link and the request is from an external ( non-school domain) account renamed to appear as a valid student.

 

I've trawled the audit logs trying to find where external requests to join might be listed but couldn't find anything. I've also looked in the google meet audit log for external requests to the classroom meet- do these requests appear anywhere ? or am I looking in the wrong audit log.

 

Ideally we'd like to turn off requests from anything but school domain accounts but I understand this is not available yet.

 

Any help appreciated.

 

Regards

Chris

[Chaniel]

Google Admin Console > Apps > Google Workspace > Google Classroom > Class Settings

 

 

Change "Who can join classes in your domain" to "Users in your domain only" and "Which classes can users in your domain join" to "Classes in your domain only"

 

If you set the above settings, an external user should get this message when trying to join via Class code:

 

The code looks correct, but your account can't access this class. Switch to the correct account etc. etc.

[cgilmour]

Thanks Chaniel - I've had a look and it was already set to this

[Chaniel]

Interesting, it's my understanding based on this that those settings should control it (and in my testing, those settings work).

 

If you make a Class with your school Google account and then sign into GC in an incognito window on a personal google account - can you actually join the class via the class code? You can also try inviting a personal google account as a student to your Class, as this should also be denied.

[dhicks]

Ideally we'd like to turn off requests from anything but school domain accounts but I understand this is not available yet.

 

It's available, but as a domain-wide setting only and you have to contact Google support to request it, so you'll need a paid-for account to be able to access support. This will stop any external user being able to even request to join a Meet session, so if you decide you do want to invite genuine external speakers you'll have to give them a temporary login on your domain.

[cgilmour]

Many Thanks for the replies - I'll contact Google support