Showing posts with label Google Workspace for education. Show all posts
Showing posts with label Google Workspace for education. Show all posts

Oct 4, 2022

[Gmail Tip] Gmail for my record management.

The key to the record is the time record. When checking the authenticity of digital documents, it has very important meanings such as writing diaries, writing minutes, exchanging data with partners, writing documents, and recording time (timestamps). If I submit evidence to the prosecution or court, can I submit data stored in Evernote, Dropbox, Google Drive, My Laptop's storage, Company File Server, etc. as evidence?

Among the digital materials, materials that can be effective as legal proofs are called e-mails. The reason is that the time (timestamp) information recorded when sending and receiving e-mail is considered to be unmodifiable, and it is because you have important time information to check the point.

That's why large businesses doing global businesses want to manage and store all the email content they send and receive with their corporate e-mail archiving solutions (called eDiscovery solutions) at a high price.

Individual or general SMBs do not need to pay extra attention to these costs. All of these problems can be solved if you use only existing e-mail, which is a private company or an ordinary company.

Most importantly, in order to use the tools for recording, you must make sure that the storage is ready for point-of-view confirmation (with the creation time recorded), no matter what tool you use for your record-writing tools. The email system may be recognized as being unable to be modified or altered in the future. So, if possible, I would advise you to log in using Gmail.

The best way to recommend is to use Gmail as much as you can, In addition to email, Gmail is a useful tool for recording. You can choose one of three Gmail (15 gigabytes for free Gmail, 30GB for Google Workspace Starter, Google Workspace Business/Enterprise or Google Workspace for Education). I think it's enough to have one with Gmail as a recording tool.

In addition to simply sending and receiving emails, Gmail has the ability to save all kinds of records (journals, diaries, ideas, book readings, minutes, receipts, paper documents scanned with smartphones, attachments, etc.). I'm using Gmail of Google Workspace Enterprise. This Google Workspace Enterprise' version includes built-in eDiscovery solution, Google Vault, so that employees who accidentally delete emails will not be deleted in Vault, which deliberately deleted sensitive mail. (These data are effective as evidence.)

Jonathan Rosenberg, vice president of product development at Google, is scanning his passport, health insurance card, and emailing himself with his email address and storing it in Gmail. This way, you can use Gmail for recording and saving because you can search anytime, anywhere, on any device.

The introduction was too long. Learn how to use Gmail to record and auto-categorize, tag, and search.

To manage your records, Send all of your content (all the data you want to record) to your email address. The way Google's vice president, Jonathan Rosenberg, mentioned above, uses mainly. Scan your passport and send it as an attachment to you by email.

At this time, you can use various features of Gmail, such as 'Tagging', 'Auto Classification', 'Labeling/Filter', 'Search', 'Auto Forward', 'Save to Attached Document Drive' and 'Apply e-Discovery'.

  1.    How to insert a tag into an email address.

    • I use Google's Keep as a memo app on my smartphone, and then I keep my records (idea memo, diary, diary, brief customer memo). In order to preserve the long-term record for timestamp to check recorded date in future, the Google Keep note will be sent to ‘hsikchoii+idea@gmail.com’. That is, my email address is 'hsikchoi@gmail.com' but the address of the recipient can be 'hsikchoi+idea@gmail.com'.
    • In the email address scheme, even if you send mail to 'hsikchoi+idea@ gmail.com' in the recipient address, the recipient address of the email content will be displayed as 'hsikchoi+idea@gmail.com' and all characters after the '+' will be ignored. So, even if you send like 'hsikchoi+idea+customer@gmail.com', your email system will be recognized as 'hsikchoi@gmail.com'.
    • After capturing a paper receipt on your smartphone (no matter what app you use for capturing), send it to your email address (eg ‘hsikchoi+receipt@gmail.com). Gmail saves it for your records in the label - Receipt.
    • If you search later in Gmail, you can easily search for all messages tagged with "+receipt" by searching for "To: receipts" in the search box.

  1.    How to automatically label incoming email

    • In Gmail, you can automatically sort all incoming messages by "label" and "filter," so you can color-categorize any desired "label."
    • Messages received at 'hsikchoi+idea @gmail.com' will automatically be given a label 'idea' and saved.
    • From the image below
      1. (1) shows the labels created for my Record Management
      2. (2) shows the labels automatically assigned with the 'Filter' function
      3. (3) is a thread function as a conversation mode  only in Gmail. If you want to send additional mail about the recorded mail or write supplementary information, if you reply to the mail, it is automatically bundled into a thread and stored as a single mail. Shows the number of messages that are bundled.
      4. The symbol shown in (4) is an indication that the e-mail address is the only person who is the only recipient.
      5. (5). For example, if you send a message to the recipient address: "charly.choi+idea@charlychoi.com, you'll automatically be given the label " Idea". You can also apply the filter internally to allow it to be automatically saved in the label -  Idea.

  1.    Search for labels and search for tags
   In Gmail, you can search for 'label:idea' in the search box via the label search. Messages can be searched tagged with '+' in recipient address search in 'To: idea' in search box

Summary

   
The reason you should use the email system as Record Management Tool for your records is due to the effect of logging time stamps on your email.

Tools that can later arbitrarily modify the time of the generated record are not suitable as a recording tool.

In Gmail, labels, tags, and filters make it easy to manage incoming messages. It is advisable to use Gmail for Record Management, but you can use any tool for recording.

Not many systems will be able to send, store, and retrieve mail regardless of location, time, or device. I strongly recommend that you manage all record with a single Gmail account rather than using a variety of tools to manage all your records.


 

Aug 17, 2022

Differences between User and Device settings and Key settings for Chrome Enterprise Upgrade (CEU)

Key settings for Chrome Enterprise Upgrade (former, Chrome Device Management)


There are more than 400+ policies that can be set through Chrome Device Management. There are five categories of settings: User Settings, Network Settings, Device Settings, Managed Guest Session Settings, and Kiosk Settings.



There are Chromebooks available for you to install and use the Google Play Store. "Google Play Store settings" has been added to Chrome Device Management for these Chromebooks. Your domain’s administrator can enable Play Store and Android Apps to be managed through the Admin Console.

One of the key elements of Chrome Device Management is setting Chrome Device to Managed Guest Sessions, Kiosk Settings, and Single App Kiosk Mode.

Many users can share chrome Devices. For example, it can be used publicly, such as a business center PC, a PC for book searching in a bookstore or a library, or a public PC used by several production workers at a production factory for business purposes. Within Chrome Device Management, you can set this up as a public session in the Managed Guest session settings.
A single app Kiosk setting only allows you to run a single app that you specify, and this app will only work in full-screen mode. Other apps cannot run in this mode.

Typically, the most important of the administrative settings in a business or a school will be user settings and device settings. Public sessions and Kiosk mode settings are optional depending on your Chromebook usage. 

Differences between user and device settings

· User policies apply regardless of which devices are logged in
oTargeted users in the domain through the Admin Console.
oControl your Chrome browser environment
§ Allowed apps and extension controls
§ Force apps and extensions to install
§ Chrome Web Store Permission Limitations
§ Browser environment control - Incognito mode, history, ad hoc mode, safe browsing, malicious sites, remote access client allowed
§ Proxy settings
§ Control the use of screenshots, block and allow access URLs
§ Print control etc.
oOrganizations that use  Google Workspace or Google Workspace for Education users can manage policies in the Google Workspace Admin console.
oCompanies and schools that do not use Google Apps must acquire and manage Chrome Device Management Console licenses.
· Device policies are to control and manage devices regardless of who logs in.
oControl who can log in, how to update, etc.
oControl how users operate the device rather than what they use on the device
§ Device registration and access
§ Allow Guest Mode, Login Restrictions (Use only specified users), SSO,
§ Chrome OS auto-update control, distribution channel control
§ Manage kiosk settings
§ Device status reporting
§ Scheduled reboot
§ Cloud Print Management
§ Bluetooth control
§ Stop using your device remotely
oDevice policies can only be controlled through the Chrome Device Management console through Chrome device management licensing.
· Each policy is mutually exclusive. - There is no policy that conflicts with each other.

If you're using a Chromebook in a company or school that uses Google Workspace or Google Workspace for Education, you can manage your Chromebook users or set up your network without having to register your device. However, device management or opt-in settings, kiosk settings, device provision/deprovision, etc. are only available when you purchased the Chrome Device Management license.

Enterprises that use Chromebooks without Google Workspace will need the Chrome device management license to manage their Chromebooks and manage their users.

Settings
Google Workspace  Admin Console
Chrome device management console
User Settings
O
O
Network Settings
O
O
Device Settings
X
O
Public Settings
X
O
Kiosk Settings
X
O
Device Provision/Deprovision
X
O

For more details - https://amzn.to/37C9xEi 


Aug 9, 2022

How to Manage Android Apps for Google Workspace users using Chromebook


How to Manage Android Apps (Google Play(beta)) for Google Workspace users using Chromebook 

A Google Workspace  administrator can manage Chromebook users who want to install Andorid apps in the domain.

Here is the information on how to manage Chromebook users installing Android apps by Google Workspace administrator.


An administrator can force to install approved Android apps for Chromebooks logined in Google Workspace. or allow Google Workspace users to install the Android apps from Play Store. 
If you’re a Chrome for business customer, the managed Google Play Store is available for these Chromebooks using Chrome OS version 53 and later. For Chrome for education, the managed Google Play Store is supported on Chrome OS version 56 and later.
Before you begin
 
 
 
 
Enable Android apps for Chrome OS in your domain
Android apps on Chrome OS use the Android and Google Play management framework.

If you enable Android apps and the domain already has an Android for business subscription that uses a third party Enterprise Mobility Manager (EMM) (such as VMware AirWatch® or MobileIron), then the existing subscription and EMM combination is used, but other aspects of managing Android apps on Chrome OS are managed through the Google Admin Console.
If you enable Android apps and the domain doesn’t have an Android for business subscription, one is created automatically and Google Device Manager is selected as the EMM.
1.     Sign in to the Google Admin console.
2.     Click Device management.
3.     On the left, click Chrome management.
4.     Click Android application settings.
5.     Select Enable Android applications to be managed through the Admin Console.
You must be a domain administrator to enable this option.
6.     (Optional) Click Billing. Verify that an Android management subscription appears on the billing page.
7.     (Optional) Click Security > Manage EMM provider for Android. Verify that Google Device Manager is listed as your EMM provider. If you already have Google Mobile Management or a third party EMM as your EMM provider, then that provider will be listed, even though Android Apps on Chrome have been enabled.
Note: Enabling Android apps on Chrome OS for your domain does not automatically enable it for individual users. To give users access to the apps you must also enable the apps for organizational units.

Install Android apps on Chrome devices
1.     Sign in to the Google Admin console.
2.     Click Device management nd then Chrome management nd then App management.
3.     Use the App Type filter setting to display Android Apps.
4.     Use the Type filter setting to display My Configured Apps or Approved Android Apps.
5.     Click dd Approve Android Apps.
6.     Search for, and click the app you’d like to approve.
7.     Click Approve.
8.     To accept the app permissions on behalf of your organization, click Approve.
9.     Click Ok.
You can also approve apps in managed Google Play.
1.     Sign in to managed Google Play, using a managed Google Play administrator account.
2.     Search for, and click the app you’d like to approve.
3.     Click Approve.
4.     To accept the app permissions on behalf of your organization, click Approve.
5.     Click Ok.
6.     (Optional) To view a list of all approved apps for your organization, click My company apps from the Apps menu.

The Google Play for business help center contains detailed information on how to manage apps and app licenses for use in your organization.
You can specify the type of installation available for each of your approved apps. You can create a subset of apps that users can choose to install, and also create a different subset of apps that the system automatically installs for every user in the organizational unit.
Force the installation of approved apps
From the list of apps you approved in managed Google Play, you can choose a subset that the system automatically installs for every user in the organizational unit. When the user logs into the device, the system automatically starts to download these apps.
Note: This policy is independent of any other Android phone or tablet policy you have in place with a third-party EMM. That means that you can have one set of apps configured to force-install on your Android phones and tablets using a third party EMM, and a different set of apps configured to force-install on Chromebooks using the Admin Console.
1.     Sign in to the Google Admin console.
2.     Click Apps.
3.     Click Additional Google services.
4.     Click Chrome management.
5.     Click App Management.
6.     On the left, select Android Apps from the App Type filter menu.
7.     Click the app you want to configure.
8.     Click User settings.
9.     On the left, select the relevant OU from the Orgs tree.
10.   Turn on Force installation.
11.   Turn on Pin to taskbar.
12.   Click Save.
Note: While the apps are being downloaded, the user can see a STOP button. If they press it the download is stopped. Another attempt at installation is made at the next login and install attempts will continue until the apps are successfully installed or until the app is no longer part of the list of apps that are force-installed.

Allow the installation of approved apps
If you don’t want to force the installation of apps you can create a list of apps that your users can voluntarily choose to install. The apps must be selected from the apps that you have approved in managed Google Play.
Note: If your organization is using a third-party EMM to manage Android phones or tablets, this option is not available to you. If the EMM has joined managed Google Play, the user sees the store layout as designed by the EMM in the managed Google Play store on their Chromebook.
If the EMM has not joined managed Google Play, the user sees an empty managed Google Play store on their Chromebook, and the only way for them to get Android apps is to configure the forced installation of approved apps.
1.     Sign in to the Google Admin console.
2.     Click Apps.
3.     Click Additional Google services.
4.     Click Chrome management.
5.     Click App Management.
6.     On the left, select Android Apps from the App Type filter menu.
7.     Click the app you want to configure.
8.     Click User settings.
9.     On the left, select the relevant OU from the Orgs tree.
10.   Turn on Allow installation.
11.   Click Save.
Apps configured to allow installation, appear in the Store home section of the managed Google Play store on the users’ dev
Before you let Google Play Store be installed on Chrome devices, make sure you’ve approved and configured apps for users. Otherwise, they might see an empty Google Play Store on their device.
1.     Sign in to the Google Admin console.
2.     Click Device management.
3.     On the left, click Chrome management.
4.     Click User Settings.
5.     On the left, select the organization to which you want to apply the settings. Learn more.
6.     Go to the Android applications section, select Allow from the Android applications on Chrome Devices (BETA) menu.
7.     At the bottom, click Save.
Settings typically take effect in minutes. But they might take up to an hour to apply for everyone.

For more information for Chromebook Management- https://amzn.to/389gZa8   - Paperback/Kindle Edition)