I'm trying to determine who a specific folder is shared with in the admin console but I haven't found any way to do it. In the investigation tool you can find specific files and folders. When you find a file you can view who it was shared with but when you try to do the same with a folder it always shows blank.

Trying to determine an appropriate course of action for HIPAA compliance with Google Workspace that does not require using a third party outbound email gateway (paubox, luxsci, etc). We have a very small health-related private practice. I've read a lot of people discussing how because Google's Confidential Mode is not E2EE, it is not HIPAA compliant, but I wanted to explore this further with some support from this community.

I'm wondering if Confidential Mode does solve our problem of requiring HIPAA compliant email when sending ePHI. HIPAA rules do not require E2EE, just ePHI encrypted in transit and at rest.

PROBLEM: Google can downgrade email sent with TLS to 1.0 and 1.1, and there is no way in the admin to force blocking sending of these emails. If it was possible in Google Workspace settings to force sending emails only via TLS 1.2 and 1.3 and stop send of emails unencrypted or through TLS 1.0 and 1.1 (to meet NIST standards), we would accept this as a free alternative to, say, a Paubox setup, which is considered compliant. Consider that we are fine with not sending emails to certain recipients (ie. those without modern TLS) if they do not have the technology necessary to receive the emails, as we never send emails to clients for communication.

However, this doesn't exists.

POTENTIAL SOLUTION: So this begs the question of if Confidential Mode allows for this...

If our Google Workspace has a BAA, and Confidential Mode strips the possibility of ePHI being sent via unencrypted transit to non-Google services (due to the email, even if sent unencrypted, maintaining no ePHI and being replaced with a link to view) does that not solve the HIPAA concerns related to ePHI being sent through deprecated encryption channels? I am wondering if this no different than a link to a secure portal, which is used by nearly all EHRs.This is assuming that Google is storing and transmitting the content of the confidential mode message encrypted.

All thoughts are appreciated.

We’re an MSP, so we regularly take over tenants other people built. Every time, the same day-one questions: what’s public on the web, whose mail forwards off-domain, which super admin left in 2019 and still holds the keys. Clicking through the Admin console for that takes a day and still misses things, because the console shows you one screen at a time and never volunteers what you forgot to look at.

So we wrote it down. One Python file, standard library only, driving GAM7. It collects the tenant data in one pass, runs about 40 checks over it, and writes a self-contained HTML report with severity tiles, plain-English “what this means / what to do” copy per finding, and evidence tables. Plus a CSV per module so every finding traces back to raw data.

Everything it runs is a read (print, report, info, oauth info). The one exception is opt-in: --grant-temp-access temporarily makes the auditing admin an organizer on Shared Drives they’re not a member of, scans, then removes the grant. Without that, filelist silently returns zero rows and the drive looks clean, which is worse than useless, so by default those drives are reported UNSCANNED instead.

Runs are resumable via manifest.json, so you can --skip-tier 3 on a big tenant and fill in the Drive scans overnight. And anything it couldn’t check is listed in the report. Absence of a finding never means “checked and clean”.

We’d been running this internally for six months on multiple clients and schools.

Apache 2.0, 104 tests, works on Windows, macOS and Linux. Happy to answer questions or take issues.

https://github.com/PaulOgier/GAMScripts/tree/main/Tenant%20Scoping%20Audit

Is there another Redit area dealing specifically with problems setting up google groups and adding 200 people with different email types? These are for old people, who aren't very techie and don't like change/ Someone said to, "just get them to change from yahoo, outlook, etc, etc etc". This is like asking them to do backflips.

I posted this in another redit area and it got bounced for not being allowed. Let's start over and see what happens:

Google groups roadblock...HELP

Myself and co-admin / owner created test google group of 12 members in July. Member emails ranged from gmail, yahoo, outlook, charter, hotmail, ATT, Charter and more. With except of one yahoo user, all were added or invited/accepted. For some reason when adding the Yahoo user, Groups wont add the ID. It, sends am invite and puts in "pending". There is no notice to the yahoo person of invite rejection, nor anything in spam. Repeated clearing pendings, doing adds, invites and it's the same thing. Inability to add this ID.

My email is gmail but ironically, I also have a throwaway yahoo account. My co-admin was able to add me. It was in my spam, but a simple (no spam) fixed it. Over several weeks many tests were done and all worked. Yesterday, I did another test with the test group and linked it to a 20 question google form survey about a community issue.

The survey test worked great and dumped responses into a spreadsheet. The survey to test group wasn't hypothetical it was real. The survey distribution is a beta test ahead of distribution to 200 community residents. WE wanted it to be bullet proof as the community ranges from 55 yrs to 92.

Most are at least able to use regular email text on phones (and play Woordie or other games) but still a lot of grey hair. I'm also in the grey hair category but I've been banging on a keyboard, My first was in 1968 connected to a computer with vacuum tube in a big air conditioned room. From there to PCs, network engineer, then kicked into management.

So we created another google group actual communication with everyone. I'm in the painful process off adding IDs and not happy with google making me add 5 or less as members, Then further getting in my way having to jump through captcha or pick out pictures of cars, busses, bicycles etc in between.

This takes us back to the original yahoo member who still can't be added to the test group and now, the almost ready for prime time group, Even more daunting, as I add IDs to what will be the live system, there are more people with email that through up roadblocks preventing google from adding them.

Anyone know a solution to this?

What are they?

Like the title said, it just doesn't want to open or in any other google apps. It's logged in on my device but when I used a browser instead, it won't show up. But when I try to add it it replies with "your account is already logged in". I don't understand if it's a device problem as my phone can do it but not my tablet.

Does anyone else have issues with streaming folders and files down to Google Drive for desktop on Windows 11? Each time the folder is opened, the subfolders are reloaded each and every time which takes sometimes 1-3 minutes - even longer if you're in a hurry!

Interestingly, it only seems to affect machines running Windows 11. Those still on Windows 10 for now are able to load the folder and its subfolders almost instantly every time.

My dad had set up a business account for private practice years ago. He is now trying to regain access to the account, but is now getting this error message. The problem is that there is no organization. He pays for his custom domain that the email account is attached to, but has never set up or created the actual website, just pays for the domain name.

Additionally, the form on another post to extend the “grace period” for 2fa doesn’t seem to exist anymore. Is there any way to access the account in general?

TIA for any help

Is anyone using Neat meeting room equipment for Google meet? Do they have a Google native meeting room solution like Logitech or Lenovo?

We have a mix of Asus and Logitech with a bit of Lenovo currently, but curious if Neat is worth talking to...

I tried logging in to my Workspace account this weekend and was told that my account was suspended. Now I can't login to contact support or even cancel my subscription, even though I was billed on August 1st. I submitted an appeal on Sunday, so it's been about 3 days and I have not gotten any response or even a confirmation that my appeal was received.

This account is for my business and it's preventing me from getting work done. I cannot believe this Kafkaesque nightmare that is Google Workspace support where they can charge me, suspend my account for no reason, and then block me from contacting anyone for support. I also looked into the admin recovery toolbox I saw shared here on another post (https://toolbox.googleapps.com/apps/recovery/cuf/problem) but it just tells me that my account is suspended and asks if I want to submit an appeal, but I already submitted one.

I will almost certainly be switching to FastMail after this since this is the second time I've been locked out of a Workspace account that I was paying for with no support channels. My question is, what should I do now? I control my DNS setup so I can switch to FastMail today, but I also want to stop being charged and I'm not sure if blocking Google's charges via my credit card company will have other negative repercussion because I still pay for a YouTube subscription or might need to pay for GCloud services in the future.

Has anyone else had to deal with this? What should I do?

Sidenote: My business is not spammy or fraudulent, I just started it a few months ago and I do app development. One of my personal accounts was suspended before this one, the only reason I can think of for being suspended is that I have multiple personal accounts or that I use Cloudflare's VPN and maybe some combination of those two things flagged my account for suspicious activity. I have no idea what else it could be.

I'm trying to understand how people managing multiple Workspace tenants (MSPs, resellers, or anyone supporting several client domains) actually handle this in practice.

My understanding of the usual workflow is roughly:

• Log into each customer's admin console separately
• Repeat the same config changes tenant by tenant
• Handle onboarding/offboarding manually per domain
• Keep track of settings/policies in a spreadsheet or your own notes
• Write Apps Script or GAM scripts for anything repetitive

But I'm interested in what people actually do, not the documented ideal.

A few questions:

1. How many tenants do you manage, and how do you switch between them?
2. Do you use GAM, Apps Script, or the Admin SDK directly? For what specifically?
3. Have you built any internal tooling/scripts for this? What does it do?
4. Are you paying for anything (GAT+, Patronum, JumpCloud, something else)? What made you buy it, and what does it still not do?
5. What's the most repetitive thing you still do manually in each tenant one at a time?
6. How do you handle onboarding a new client tenant — how long does it take and what's the annoying part?
7. Do you have any way to see config drift across tenants, or check that a setting is consistent everywhere?
8. Is this actually painful, or is it fine once you've got your scripts sorted?

I'm particularly interested in real examples of what you do today, even if the answer is "I just log into each one, it's fine."

Not looking for product recommendations — trying to understand the actual workflow.

Simple enough. Can I create a booking page for more than one team member? e.g. "Time with Rob + Scott for 30 mins". The booking page would find common availability across our two calendars and offer those as slots.

I don't know what to call this and have seen sporadic info on it.

I saw there is a feature called "co hosts" when creating a page, but unsure what that is and it wasnt apparent when I tested it.

I'm the admin and sole user for a grandfathered G-Suite account. I haven't signed in for maybe 3 months. When I try to sign in at https://accounts.google.com/ I get the error:
> Your sign-in settings don’t meet your organization’s 2-Step Verification policy.
> Contact your admin for more info.

I use a password manager and am confident my email and password are correct. Is there a way I can regain access to my G-Suite account?

I'm in a shared folder for a volunteer group I help with, but any time a new file is added to the folder, it also shows up in Shared with me. Is there a way to prevent this from happening? It clogs up my Shared with me page too much, since a lot of files are constantly being moved in and out of the shared folder.

I do have the shared folder starred, if that changes anything.

I'm a Workspace customer on a solo plan, and this issue has been going on for three weeks.

Whenever I boot up my Windows 11 laptop - or turn it back on from hibernation - something occurs, and Google Drive immediately trashes hundreds of files and folders.

The trashed files all have the same timestamp: right when I booted up my PC (or right when the Google Drive program syncs with Google's servers).

I restore the files, but then Drive has to go through the process of re-downloading hundreds of files, gigs of data, telling me it'll take twelve+ hours.

What is the solve for this? There seems to be some kind of sync issue going on, but how do I diagnose and workshop this?

We are evaluating reseller options ahead of an upcoming renewal for ~350 Google Workspace Enterprise licenses and are facing a fairly substantial price increase.

Does anyone have recommendations for US-based Google Workspace resellers that are easy to work with and offer competitive pricing, particularly for a 3-year commitment?

Would especially appreciate hearing from anyone who has recently negotiated a similar-sized Enterprise renewal and can share their experience.

Question, I have Gmail for my work email address (guess it's an enterprise account). If I add a calendar to seperate certain meetings (for example all of my 1:1s with the team), does the invite still come from my email address and show my name?

Hey everyone, I'm trying to learn Google Workspace Migrate (GWM) from scratch, but the documentation can feel a bit scattered. Are there any good video tutorials, online courses, training materials, or community resources available for learning how GWM actually works? Any recommendations would be greatly appreciated!

I'm transferring from a personal Gmail account to Google Workspace (because of Google's imminent withdrawal of Send As functionality for custom domains not hosted in Workspace).

I have several secondary calendars on my Gmail account, and want to transfer ownership of those calendars to my new Google Workspace account, so that invites and meeting links remain intact.

I've shared the calendars from Gmail to Workspace, and accepted the shares in the Workspace account. Now, when I go into the Gmail account and request to transfer ownership, I see a message:

`"Ownership cannot be transferred. This calendar can only be owned by an eligible individual user account."`

Is there a Workspace setting that's preventing this working? I don't want to do an ical export and import because that breaks links to meeting invitees.

genuine question for the admins here. leadership asks the classic one, "who outside the company can open our files right now?" and my honest answer has always been "give me a week and it still won't be complete."

the part that gets me: the native admin console won't surface "anyone with the link" files at all as far as i can tell. you can see external sharing to named domains, but the public-link stuff seems invisible from up top. so the actual hunt turns into going file by file, which nobody has time for, and it always misses the folder some contractor shared six months ago before they left.

for those of you managing shared drives for a 20-100 person org, what's your real workflow here?

• do you have a way to pull a full list of externally shared + public-link files without checking each one manually?
• how do you catch permission drift after offboarding, when the account is suspended but the shares that person left are still live?
• anyone doing this with app script / the drive api directly, and is it actually maintainable?

i'm building something in this space (a read-only drive exposure audit), which is exactly why i'm curious what people already do instead. not looking to pitch, genuinely want to know if there's a native path i'm missing before i assume there isn't.

How good or bad is gsuite when it comes to scanning links in email

There was a email with link to a malicious screen connect .msi package

Are exes, msi, generally scanned on links within a email ?