Google Drive client service unavailable for children

[Tones]

Well this is fun. I think the limits for the age related restrictions have kicked in.

 

Student can't login to Google Drive client on the computer but can online.

 

"Authorisation Error

Error 403: access_denied

Rejected by account restrictions policy

The content in this section has been provided by the app developer. This content has not been reviewed or verified by Google.

If you’re the app developer, make sure that these request details comply with Google policies.

access_type: offline

hl: en

response_type: code

redirect_uri: This is a CDN address

state: oHVmTn0G92A4ctKSqVnD

prompt: consent

client_id: 947318989803-6bn6qk8qdgf4n4g3pfee6491hc0brc4i.apps.googleusercontent.com

scope: https://www.googleapis.com/auth/userinfo.email https://www.googleapis.com/auth/docs.test https://www.googleapis.com/auth/drive https://www.googleapis.com/auth/drive.photos.readonly https://www.googleapis.com/auth/peopleapi.readonly https://www.googleapis.com/auth/meetings https://www.googleapis.com/auth/drive.activity.readonly https://www.googleapis.com/auth/experimentsandconfigs https://www.googleapis.com/auth/photos.native openid"

 

"Can't access this service

username@domain

This service is unavailable for Google Workspace for Education users who are under 18 and children under 13 (or the age of consent in your country)."

 

 

Google's webchat was wonderful and helpful.

 

Google Workspace Support: I'm currently checking the information with the Drive team.

Google Workspace Support: Thanks for waiting. Sorry for the delay.

Google Workspace Support: I have received a confirmation from an internal team that this error will be expected if the users are under an organization that has the age based restriction set as "Some or all users are under 18 years of age" .

ME: So they have to be over 18 to login to Google Drive client?

Google Workspace Support: Yes, but also the organization where they are located must have the Age-based setting set as "All users are 18 or older".

Google Workspace Support: The setting is based on laws and is applied for Google Workspace for Education specifically

Google Workspace Support: Sorry, just to clarify, this feature is based on laws, if you see on the error it says "This service is unavailable for Google Workspace for Education users who are under 18 and children under 13 or the age of consent in your country".

 

 

... to be continued when I grow my hair back.

Edited September 13, 2021 by Tones

[rogerdnixon]

Interesting. We have all of our student OUs marked as "Some or all users are under 18 years of age" and the Google Drive app works fine.

 

Have you actually go it allowed in Apps > Google Workspace > Drive and Docs > Features and Applications > Google Drive for Desktop

 

Got the latest version.

 

I have know Google support to get it wrong (not often), but this would be all over all the various Google Workspace communities if it was a thing.

[Primus]

I will be very very upset if this is the case, we use it extensively with students.

[Tones]

I have it enabled - and yeah I thought I'd be able to find something online too if this was the case across the board. Waiting for students to reappear this morning and try it out.

[paulkerton]

I don't believe this is the case, it's certainly not listed in the article:

https://support.google.com/a/answer/10651918?hl=en#zippy=%2Cservices-not-available-to-users-under

 

However, as a general rule we have it switched off for everyone anyway. It's too much of a security issue for us to allow Windows that kind of access to Drive.

[Tones]

I read the article, Google support linked to it and said that it was only listing some of the items it blocked and Google Drive app access wasn't listed.

 

Honestly felt like they had no idea and were just rolling with deal with it, that's how it works now.

 

What I think has occurred - I didn't have the flag for "Some or all users are under 18 years of age" set on the OU at all. And setting might have fixed it.

 

 

Spoke too soon got more users with the issue. I think the setting is propagating out.

Edited September 14, 2021 by Tones

[rogerdnixon]

OK - take it all back - happened to us today. I have emailed some people directly at Google as this is nuts.

[mavhc]

By default for schools it's assuming all users are under 18 now, you have to set which OUs contain adults. Not sure if it's related, but that's a recent change

[rogerdnixon]

Been onto some Google people. Apparently some of the services that are now not allowed kill the Drive App if not enabled. They are looking into it. Our Google Partner has just told use to bung the OUs back to over 18 to fix the issue for now.

[Tones]

The adults weren't the issue here, it was the students. They prewarned before Sept about that change and we had already made it @mavhc

 

The issue is with the students under 18 not being able to use it.

 

Thanks rogerdnixon - it's rather annoying that the Google Support chat person yesterday fobbed it off. I gave him the scopes and said that there must be something blocked behind the scenes or something we need to turn on as a 3rd party app and they just came back with set all your users to over 18 or stop using it, the law is final. :/ ridiculous support.

[rogerdnixon]

Will work fine if you mark an OU as over 18. You can always manually disable the things they should not have access to. I think in this case its Google not testing something and being caught on the back foot by their own changes - hence support being clueless. Helps to know a few Googlers to berate...

[paulkerton]

Helps to know a few Googlers to berate...

 

Absolutely. They must think "Oh god it's that Paul emailing again - what's he moaning about now?" sometimes!

Seems like unintended consequences, doesn't it? The Drive app issue, not me emailing!

Edited September 14, 2021 by paulkerton

[Tones]

Willing to share your contacts? I think me posting and moaning on the forum worked enough this time lol.

 

Also @paulkerton you can restrict the drive app to only work on authorized computers if you're concerned about outside use. Primarily the students that need to use it vs the web versions are in Art using Bridge. It's cost saving on internal storage for a faculty that takes up a lot of space and works fine.

[paulkerton]

Willing to share your contacts? I think me posting and moaning on the forum worked enough this time lol.

I can't really, it's part of us being a Reference School

Also @paulkerton you can restrict the drive app to only work on authorized computers if you're concerned about outside use. Primarily the students that need to use it vs the web versions are in Art using Bridge. It's cost saving on internal storage for a faculty that takes up a lot of space and works fine.

 

It's not outside use I have concerns about more so Windows increasing number of zero day issues being an issue.

[Tones]

That's fair paulkerton, there's a lot of them. :-)

 

What's a reference school? You directly linked with Google?

 

Edit: Nvm I googled it lol

Edited September 14, 2021 by Tones

[rogerdnixon]

Confirmed by Google as a bug in the new settings. Source of the issue identified and they are working on a fix. A reference school is a programme run by Google - schools that have done cool stuff and Google has noticed. You get quite a few mugs and can stick a badge on your website! You do get to test new stuff and obviously get some contacts at Google you might not otherwise have.