TwistedHelixis

Try adding WiFi settings manually on one test device. If you use them, also add the proxy and ssl certificate manually.

I am 99% sure this calendar is no longer active or viewable. It should have deleted itself when I deleted her account. For whatever reason it didn't delete itself from invited pupils personal calendars.

When I log in as a pupil, click on the calendar invite, it just opens a small invite window with 'Yes No Maybe' at the bottom. There is no way of getting into the settings to see the ID. What I have found is that in the invite window you can copy all the pupils that have also been invited. So I might be able to login as each pupil, then delete the invite displayed on their calendars. Not tried this yet, so not sure if it works or not. Before I do this, any other ideas?

This might be rather hard to explain. We had an email from a parent saying that when she opens her child's Google calendar, it lists lots of pupils names and emails, some of those pupils are no longer at the school. When we log in as the pupil, we can see a reoccurring invite, when we click on the invite it does list pupils names and emails. What we think has probably happened, 4 years ago a teacher created a reoccurring weekly invite and invited all the pupils. A few years ago the teacher left, her account has since been deleted. Over the past 4 years some of the pupils will have also left the school, but the invite is still listed in the current pupils calendars each week. How do I go about deleting this invite from a teachers account that has been deleted?

Thanks. I worded my OP very poorly, but have worked everything out that I needed to.

Hi, Slight confusion over terminology used...... I probably know the answer but wanted to double check first. Recently added a second domain to our Google Workspace acc. So now we have a primary domain and secondary domain. Just wanting adding SPF record to our secondary domains DNS Google help has the following.... I guess I just go with @, but wanted to double check what a sub domain looks like in Google Workspace. When I go into workspace GUI, I cant find anything about adding a sub domain, it just lists secondary domains or user alias domains. So are sub domains the same as User alias domains? If so, then I should just go with @ symbol in my TXT record.

Many thanks Andy, that is brilliant :-)

I will take a look later when I get a few some time, but tbh this has confused me now. Please let me know if I am totally wrong on this, but from what I can tell the emails are coming from an American server ( 50.31.43.182) and getting sent to a bunch of outlook users, but all the emails are being sent from the American server using our UK school @ domain in the from address. Then the Outlook servers are seeing an issue with those emails DMARC settings and sending me an email to let me know they have received emails from someone that might not be us. Are you saying that all these emails get sent to our server too? FYI our school is 100% Google and do not use Outlook.

I am also helping to set up DMARC at a friends school. I just asked them to check their reports. They also have the failed IP 50.31.43.182 listed. So it is starting to seem more likely that this is some kind of school used email system, which is good. In the report it does list that the report was supplied from Enterprise Outlook, so I am guessing the emails are getting sent from 50.31.43.182 to people in Outlook. The only systems I can think of that might send emails for the school are Arbor and parentMail, but they are both external UK companies. 1) If it is a legitimate school emailing system, how on earth do I workout what school system is sending these emails? 2) If I do workout which system is causing the failed logs, how do I go about fixing this?

Thanks, perhaps this is the case. The IP listed in the report is 50.31.43.182 When I do a 'who is' lookup, it lists Twilio SendGrid Twilio SendGrid seem to offer a range of email services. Not sure why anyone at our school would need to be using this. So, what I first need to workout.... is the IP 50.31.43.182 the email sender or recipient. How do I find that out?

Thanks for replying. Sorry, I'm very much learning all of this as I go. Do you mean quarantine or reject? Can't imagine we are well known, we are just small primary school in the UK. When you say legit, do you mean this sounds like someone spoofing our domain? How would I do this? I don't think these emails are getting sent to our email inbox. Are they not getting sent from a spoofer's email system, to a third party email inbox, which has then flagged this and sent me an email of the spoofer IP in my DMARC reported? Or have I got this completely wrong?

A few weeks ago I setup DMARC with p=none I have manually been uploading the reports to MX tool box. Luckily we don't have that many. I just uploaded a DMARC Aggregate Report and it lists 39 fails from an IP. I just checked the IP and its some company in America (I'm in the UK) So, just a few basic questions. Does this mean DMARC has done its job and flagged someones IP address as sending emails out as though they are the school? Or does this mean they received emails that they rejected? What do I do next? Do I just keep reading the reports until I am happy nothing we are sending gets flagged as failed, then at that point move to p=quarantine or p=reject? Or should I panic?

I have installed many different types of printers and in all my years the Xerox I was asked to install last year was a total nightmare. The entire deployment was so different from the norm. Got there in the end but they will never be on my recommended list.

I think that has answered my question. Basically not all my users are using GCPW. If I have this policy set and a new users logs onto a windows laptop that doesnt have GCPW installed, then opens Chrome Browser, previously they would then get asked to log in to Chrome, but with this policy I am guessing that doesn't happen. So you are saying they can still log in, but they will need to click login at the top right?

If this removes the welcome login page with sign in info for Chrome Browser, how does this effect users that are not logging into GCPW, but still need to log into Chrome Browser? EDITED

Its half term next week, so ill have another go then. Thanks

Its just not working. I first tried it on a Win 11 pro laptop, but now testing on Hyper-V > Windows 11 Edu VM. Literally everything else is working.

Just having a play with GCPW. All seems OK. Security setting deploy and a few test policies apply. Should GCPW automatically (SSO) log me into Chrome Browser? As its not doing this.

Hi, I have been testing GCPW and have managed to get a few test policies deploying, so I know that is working, although I am still very much in the learning stages. I cant for the life of me workout how to deploy our proxy settings. We have a very basic proxy GPO deployment from our server, with the following settings... I thought it would be simple to replicate this in Google Admin, but I cant work it out. When I go into devices > Endpoints > Settings > Windows > Custom Settings, Then create a new setting, it lists about 10 different options for proxy, non of which seem to work, or have any information about how these should be set. I have searched online, but adding the proxy settings via GCPW seems to be lacking any information online. Any ideas?

Yes just noticed that, but I have paid for the licenses so will do that when they have gone in.

If I had know this would happen, then yes, but the steps sent over didnt mention anything about this and the info only came up after I had accepted. Ill know for next time

So I wanted to add a license upgrade to our Workspace education fundamentals. The reseller come back with a link that takes me to a Subscriptions from resellers page, I then click purchase from reseller, then enter the reseller code, then select the license I need. Then the next page comes back with the following.... There is now way to go back :-( Have I made a big mistake??????

Just investigating GCPW as a login system and wanted to start a post about deploying some of the main setting we currently deploy from GPO. Just so I can get my head round this aspect. I am also thinking of upgrading to Google Education Standard, but haven't done this yet. If our main GPO policies cant be deployed from Workspace, then I'll probably not bother upgrading to Standard. So, the first few setting I would need to configure would be the Proxy and Smoothwall SSL certificate. For our Chromebooks I can deploy these directly from Workspace, but I cant seem to find somewhere to deploy these to Windows devices. Do I need to upgrade our Workspace to see these options, or is it just not possible? EDIT, would the certificate be deployed to Windows devices using the Endpoint verification section, under Networks > Certificates page?

Is the endpoint license costed per endpoint?

Was just about to post the same questions. Interesting to know that standard and plus licenses are for all accounts and not just staff or specific accounts.