G Suite Administrator Traning Course

The Complete Course
To Manage G Suite
Course by: Saleh Ramadan
salehram@gmail.com
http://sysengtales.salehram.com

The Complete Course To Manage G Suite
Saleh Ramadan - salehram@gmail.com
Course outline
1.Introduction about myself and the course
2.Introduction to G Suite Admin Console
3.Managing your domain
4.Overview on Google Sites
5.Controlling your mail flow
6.Using reports
7.Advanced management
8.Overview on Google Vault
9.Overview on Google Cloud Certified Associate exam

Introduction About Myself and the Course
PART ONE

●
Who am I, what do I do, and how to get in touch with me
●
What is G Suite?
●
What is this course, and why?
●
Other training and information resources for G Suite administrators
●
Who are the audience for this course?
●
Lab setup, environment assumptions, and some prerequisites
PART ONE

1. Who am I, what do I do, and
how to get in touch with me
PART ONE

●
An IT professional with 10+ years of experience.
●
Been working with G Suite for 4 years.
●
Did many deployments for users ranging from hundreds to thousands.
●
I migrated many different organizations with completely different
requirements and use cases and line of business.
●
Mostly I worked with Microsoft Exchange Server environments and Office 365…
●
Implemented multiple small apps and scripts using Google APIs to fulfill
specific customers requirements during projects.
PART ONE
1. Who am I, what do I do, and how to get in touch with me

PART ONE
Website
LinkedIn
https://www.linkedin.com/in/salehram
1. Who am I, what do I do, and how to get in touch with me

2. What is G Suite?
PART ONE

●
Part of Google Cloud
●
Pure cloud services based on web
●
Amazing for small, medium, and enterprise!
●
Focuses on innovation and ease of accessibility
●
However, there are certain aspects needs improving… :(
●
Not everything can be compared to Office 365!
●
When used with Chrome devices, it is the best!
PART ONE
2. What is G Suite?

9 core applications, divided into 4 groups
PART ONE
2. What is G Suite?
Communications Storage Collaboration Admin and control
And many other services and applications...

3. What is this course, and why?
PART ONE

About this course...
●
Mainly this is an administration course… No deployment stuff
●
Will have some focus on mail flow settings, Drive settings, Groups settings
●
Will make sure to cover everything related to G Suite administration
●
Passing the exam is not the primary goal of this course, however will make sure
to cover all exam objectives.
●
There might be a deployment course soon!
PART ONE
3. What is this course, and why?

4. Other training and information resources
PART ONE

Google’s official administrators course:
G Suite Administrator Fundamentals (http://admin-training.googleapps.com/)
Google’s G Suite channel on YouTube:
https://www.youtube.com/user/AppsAdminTraining
G Suite Administrator help site!
https://support.google.com/a#topic=29157
PART ONE
4. Other training and information resources

5. Course audience
PART ONE

This course is for...
●
New or existing G Suite administrators
●
Anyone who wants to get to know about G Suite
●
Any curious person!
PART ONE
5. Course audience

Some basics you might need for this course...
●
The skills of troubleshooting!
●
Network knowledge/logic
●
Being able to find your way through Windows Server…
●
The will to learn new stuff
PART ONE
5. Course audience

6. Lab setup and our environment
PART ONE

●
Will use an active domain name
●
Will create new trial G Suite for this course
●
1 Windows Server 2012 R2
●
Demo for GCDS
●
Demos for GAM and other tools
●
Demos for Google APIs
PART ONE

Your requirements to follow along...
●
A registered domain name
●
Any modern Microsoft Windows OS (8, 8.1, 10, 2k8R2, 2k12, 2k12R2...)
PART ONE

Introduction to G Suite Admin Console
PART TWO

●
●
Setting up a new G Suite account
●
Verify domain and setup MX records
●
Introduction to email security
●
Customizing our Admin Console
●
How to get support from Google
●
Provisioning users
PART TWO

1. Introduction to G Suite Admin Console
PART TWO

●
A web interface
●
Not the only tool to manage users or domain settings (will see other tools later
on)
●
There is a mobile application for Android and iOS
●
Can assign permissions to other admins based on modules
PART TWO
1. Introduction to G Suite Admin Console

4. Introduction to email security
PART TWO

●
We need to secure our outgoing and incoming mail flow
●
Incoming mail flow is secured for us by Google, and we can customize it
●
Outgoing mail flow is secured by:
●
SPF
●
DKIM
●
DMARC
PART TWO
4. Introduction to email security

7. Provisioning users
PART TWO

●
There are multiple methods we can use to provision users:
●
Manually creating each user
●
Sending invitation email to each user
●
Using a CSV template
●
Using GCDS
●
Using Google Admin SDK API
PART TWO
7. Provisioning users

Managing Your Domain
PART THREE

●
Managing users
●
Managing groups
●
Managing OUs (Organizational Units)
●
Managing core apps
●
Managing security
●
Mobile Device Management (MDM)
●
Working with additional domains
PART THREE

1. Managing users
PART THREE

●
Rename, move, suspend/restore, add/remove aliases
●
Delete, un-delete, transfer Drive and Google+ data, restore data
●
Reset password, force password change, monitor password strength
●
Using pre-built admin roles, create new admin role, assign admins
●
Manage user licenses
PART THREE
1. Managing users

2. Managing groups
PART THREE

●
Group types
●
Create, edit, and delete a group
●
Group settings and permissions
PART THREE
2. Managing groups

3. Managing OUs
PART THREE

●
What are organizational units and why are they used?
●
Creating OUs
●
Managing users and services based on OUs
PART THREE
3. Managing OUs

What are organizational units and why are they used?
●
Similar in concept to AD OUs
●
Used to separate users into groups and hierarchies
●
Can customize apps and services based on them
PART THREE
3. Managing OUs

4. Managing core apps
PART THREE

●
Calendar and Contacts
●
Drive and Docs
●
Gmail
●
Google Hangouts and Google+
●
Keep and Sites
PART THREE
4. Managing core apps

5. Managing security
PART THREE

●
Email security
●
Controlling password length, and monitor its strength
●
Control API Access, API Client Access, and Less Secure Apps
●
2-step authentication
●
SSO (Single Sign-On)
PART THREE

SPF, DKIM, and DMARC records
SPF “Sender Policy Framework” is a text (TXT) record used to identify the source
server(s) for your outgoing email address.
Badly configured SPF record can lead to our outgoing email either classified as a
spam at the destination or being rejected!
Every server will send email for us MUST be included in the SPF record data
PART THREE

DKIM “DomainKeys Identified Mail” is a text (TXT) record contains the public key of a mail server that
signs its outgoing email.
It is an authentication method to verify the received email has came from a specific domain was
authorized by that server
Badly configured DKIM, or a server configured to sign mail without a proper DKIM will result to
outgoing mail being rejected by everyone!
Some DNS hosting providers have issues with long DKIM records (some won’t accept a key length of
2048, so you will be forced to use a 1024 key)
PART THREE

DMARC “Domain-based Message Authentication, Reporting & Conformance” is a
text (TXT) record that controls the how to handle the action against email
messages if they fail SPF or DKIM check
NEVER setup a DMARC policy before making sure SPF and DKIM are fully setup
and working
Bad DMARC will cause outgoing messages to be rejected
PART THREE

6. Mobile Device Management (MDM)
PART THREE

●
Overview of MDM
●
Types of devices we can manage using MDM
●
Enabling management for Android and Google Sync devices
●
Enabling management for iOS devices
●
Enabling EMM for advanced features
●
Overview of the available policies
●
Advanced settings, App management
●
Device approvals
PART THREE

Types of devices we can manage using MDM
Android based devices
iOS
Other devices
Chrome devices
PART THREE

7. Managing additional domains
PART THREE

●
Why we need additional domains?
●
Types of additional domains we can use
PART THREE
7. Managing additional domains

Overview on Google Sites
PART FOUR

●
What is Google Sites
●
Some use cases for Google Sites
●
Creating a Google Site
PART FOUR

1. What is Google Sites
PART FOUR

Part of core apps in G Suite
Can create nice looking portals, file libraries, dashboards, and even websites
Not a full replacement for SharePoint
Easy to build a quick site and have others collaborate on building it at the same
time
PART FOUR

Classic sites vs. New sites
Classic sites still has more functionality, scripts, and more customization
New sites has the good look, easier to use, and more user friendly!
The new sites “site” is made in a file and you can see it in your Google Drive. New
sites has similar sharing permissions as the files in Google Drive
PART FOUR

2. Some use cases for Google Sites
PART FOUR

3. Creating a Google Site
PART FOUR

Controlling Mail Flow
PART FIVE

●
The types of controls that we have
●
Routing settings
●
Default routing
●
Sending routing
●
Receiving routing
●
Content compliance
●
Attachment compliance
PART FIVE

1. The types of controls that we have
PART FIVE

2. Routing settings
PART FIVE

3. Default routing
PART FIVE

4. Sending routing
PART FIVE

5. Receiving routing
PART FIVE

6. Content compliance
PART FIVE

7. Attachment compliance
PART FIVE

Using Reports
PART SIX

Using Reports
●
Available reports
●
Highlights, Aggregate, Security, Apps usage activity, and Account activity
●
Audit reports
●
Email log search
●
Setup alerts
PART SIX

Using Reports
1. Available reports
PART SIX

Using Reports
2. Highlights, Aggregate, Security, Apps usage activity, and
Account activity
PART SIX

Using Reports
3. Audit reports
PART SIX

Using Reports
4. Email log search
PART SIX

Using Reports
5. Setup alerts
PART SIX

Advanced Management
PART SEVEN

Advanced Management
●
Google Chrome management
●
Data Migration Services
●
Introduction to GAM
●
Introduction to Google API
●
Other tools for G Suite from Marketplace
PART SEVEN

Advanced Management
1. Google Chrome management
PART SEVEN

Advanced Management
There are two types of chrome policies
1. Policies that are applied through the Admin Console (cloud policies)
2. OS user or machine policies set through Group Policy
To benefit from those policies, you need to make sure Chrome is the ONLY
allowed browser on non-Chrome devices. And you must know when to use either
one of those two types!
PART SEVEN

Advanced Management
Chrome devices are..
Chromebook
Chromebox
Chromebox for meetings
Chromebit
Chromebase
PART SEVEN

Advanced Management
2. Data Migration Services
PART SEVEN

Advanced Management
What can be migrated?
We can migrate the following:
1.Email messages
2.Calendar items
3.Contacts
Must have the rights to perform the migration if not a super admin
PART SEVEN
2. Data Migration Services

Advanced Management
3. Introduction to GAM
PART SEVEN

Advanced Management
Meet the magic of GAM!
GAM is a command line tool for Google G Suite Administrators to manage domain
and user settings quickly and easily.
Because it is a command line tool, you can do almost anything you want. You can
automate things in an amazing way!
Examples: managing users’ signature, maintaining a password reset cycle,
managing users’ photos, and many more tasks!...
PART SEVEN
3. Introduction to GAM

Advanced Management
4. Introduction to Google API
PART SEVEN

Advanced Management
The power of Google APIs
●
Google APIs are here to help you do the complex, and very specific
requirements that you might have in your organization!
●
What the Admin Console cannot do, the API will do it!
●
GAM uses Google APIs to function and do almost anything you want in G Suite
●
There is an API for almost everything that Google has
●
To get better results, use Python, but many other languages and platforms are
supported, even .NET!
PART SEVEN

Advanced Management
5. Other tools for G Suite from Marketplace
PART SEVEN

Advanced Management
If you want something that is not available in the Admin Console, look for it in the
Marketplace! You will find it there
Not everything is free, and not everything is paid as well
You can try the apps before you commit on rolling out to all or part of your
organization
Google does not support these apps, nor handle their billing
PART SEVEN
5. Other tools for G Suite from Marketplace

Advanced Management
The AppsScript
AppsScript is an easy way to do custom stuff that use Google APIs
Very easy to write the script based on Javascript notation
A lot of help resources are available
Can do a lot of things from small Docs/Sheets plugins to standalone apps!
PART SEVEN

Overview of Google Vault
PART EIGHT

●
What is Google Vault
●
How to get Google Vault?
●
What are the use cases of Vault
●
Security and other considerations for Google Vault
PART EIGHT

1. What is Google Vault
PART EIGHT

E-Discovery and archiving service
Does NOT come free. You have to pay 5$ per user for Google Vault in addition to
the other license cost
Does NOT retain the data of deleted accounts
Uses role based permissions mobel
YOU MUST BE CAREFUL FOR WHO GETS ACCESS TO IT!!!
PART EIGHT
1. What is Google Vault

4. Security and other considerations for Google Vault
PART EIGHT

●
Only legal people should access it, or anyone who NEEDS to work on it for the
duration of his need ONLY
●
Exposes ALL of the data in your organization based on the retention policy that
you setup
●
Can cause data loss if configured to cause damage
●
Does not retain the mailbox structure or labels. Will show you the results in one
flat view!
●
Not for back up and restore use
●
Because it uses role/module based permissions model, make sure to assign
only the lowest required permission to perform the required task
PART EIGHT
4. Security and other considerations for Google Vault

Overview of
Google Cloud Certified Associate exam
PART NINE

Overview of Google Cloud Certified Associate exam
●
What is the exam? And what does it mean?
●
Overview of the exam topics
●
Registering for Google Cloud Certified Associate - G Suite Administrator Exam
PART NINE

1. What is the exam? And what does it mean?
PART NINE

2. Overview of the exam topics
PART NINE

3. Registering for Google Cloud Certified Associate - G Suite
Administrator Exam
PART NINE

THANK YOU!
Course by: Saleh Ramadan
salehram@gmail.com

G Suite Administrator Traning Course

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (20)

Ähnlich wie G Suite Administrator Traning Course

Ähnlich wie G Suite Administrator Traning Course (20)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

G Suite Administrator Traning Course