Introducing limits on file access requests in Team Drives

Starting today, in situations where a user is sent a link to a file in a Team Drive that they don’t have access to, we’ll only send the Request Access notification to the creator of the file, or a limited group of individuals who had relevant interaction with the Team Drive. We will no longer always send it to all members of the Team Drive.

This change not only helps to ensure that the members of your Team Drives aren’t receiving unnecessary emails, it also prevents unwanted oversharing of Team Drive content.

Please Note: We are continuing to add signals and improve the quality of our Request Access notifications so the members of your Team Drives can quickly gain access to content.

Launch Details
Release track:
Launching to both Rapid Release and Scheduled Release

Editions:
Available to G Suite Enterprise, Business, Nonprofit, and Education editions only

Rollout pace:
Full rollout (1–3 days for feature visibility)

Impact:
All end users

Action:
Change management suggested/FYI

 

Reference by Google.com

Search more intuitively using natural language processing in Google Cloud Search

Earlier this year, we launched Google Cloud Search, a new G Suite tool that uses machine learning to help organizations find and access information quickly.

Just like in Google Search, which lets you search queries in a natural, intuitive way, we want to make it easy for you to find information in the workplace using everyday language. According to Gartner research, by 2018, 30 percent or more of enterprise search queries will start with a “what,” “who,” “how” or “when.”*

Today, we’re making it possible to use natural language processing (NLP) technology in Cloud Search so you can track down information—like documents, presentations or meeting details—fast.

Find information fast with Cloud Search

If you’re looking for a Google Doc, you’re more likely to remember who shared it with you than the exact name of a file. Now, you can use NLP technology, an intuitive way to search, to find information quickly in Cloud Search.

Type queries into Cloud Search using natural, everyday language. Ask questions like “Docs shared by Mary,” “Who’s Bob’s manager?” or “What docs need my attention?” and Cloud Search will show you answer cards with relevant information.

NLQA-Blog

In addition to natural language processing, Cloud Search users will now see content from the new Google Sites in their Cloud Search results.

Having access to information quicker can help you make better and faster decisions in the workplace. If your organization runs on G Suite Business or Enterprise edition, start using Cloud Search now. If you’re new to Cloud Search, learn more on our website or check out this video to see it in action.

For more information on using Cloud Search, visit the Help Center.

*Gartner, ‘Insight Engines’ Will Power Enterprise Search That is Natural, Total and Proactive, 09 December 2015, refreshed 05 April 2017

Launch Details
Release track:
Launching to both Rapid Release and Scheduled Release

Editions:
Available to G Suite Business and Enterprise editions only

Rollout pace:
Full rollout (1–3 days for feature visibility)

Impact:
All end users

Action:
Change management suggested/FYI

 

 

Reference by Google.com

 

Addresses, phone numbers, and contacts now converted to links in Gmail and Inbox to save users time

Gmail users often exchange information like addresses and phone numbers with each other to set up meetings, introduce colleagues, and plan events. Precious time can be lost by having to copy and paste this information from an email into other apps and websites, so we wanted to provide a better way to perform these tasks that also saves time. That’s why starting today, Gmail and Inbox by Gmail on Android, iOS, and the web will begin converting text to interactive hyperlinks whenever they detect phone numbers, addresses, and email addresses in emails.image1
How it works
Clicking an address link will take the user to Google Maps. Clicking an email address will compose a new email, using the user’s default email client. Finally, when using a mobile device, clicking a phone number will start a call request using the default phone app.
event-location
Launch Details
Release track:
Launching to both Rapid and Scheduled releaseEditions:
Available to all G Suite editions

Rollout pace:
Full rollout (1–3 days for feature visibility)

Impact:
All end users

Reference by Google.com

Embed websites as iframes in the new Google Sites

We’ve heard you loud and clear—you want better ways to add content to the new Google Sites. Today, we’re making it easy. Going forward, you can embed an entire web page as an iframe in a new Google site. This will allow you to pull in content from other websites and Google tools like Apps ScriptData Studio, and App Maker, saving you the trouble of duplicating and updating that information on your page. Simply select “Embed URL” from the Insert menu. Note that this will only work if the web page you’re trying to add allows embedding.

Embed Webpage

Check out the Help Center for details, and stay tuned for more features coming soon.

Launch Details
Release track:
Launching to Rapid Release, with Scheduled Release coming in two weeks

Editions:
Available to all G Suite editions

Rollout pace:
Full rollout (1–3 days for feature visibility)

Impact:
All end users

Action:
Change management suggested/FYI

 

Reference by Google.com

7 ways admins can help secure accounts against phishing in G Suite

We work hard to help protect your company against phishing attacks—from using machine learning, to tailoring our detection algorithms, to building features to spot previously unseen attacks. While we block as many external attacks as we can, we continue to build and offer features designed to empower IT administrators to develop strong internal defences phishing, Security, email security against phishing.

Here are seven things we recommend admins do in G Suite to better protect employee data.

1. Enforce 2-step verification
Two-step verification (2SV) is one of the best ways to prevent someone from accessing your account, even if they steal your password. In G Suite, admins have the ability to enforce 2-step verification. 2SV can reduce the risk of successful phishing attacks by asking employees for additional proof of identity when they sign in. This can be in the form of phone prompts, voice calls, mobile app notifications and more.

2sv

G Suite also supports user-managed security keys—easy to use hardware authenticators. Admins can choose to enforce the use of security keys to help reduce the risk of stolen credentials being used to compromise an account. The key sends an encrypted signature and works only with authorized sites. Security keys can be deployed, monitored and managed directly from within the Admin console.

security-key

Watch “The Key to working smarter faster and safer” on YouTube

 

2. Deploy Password Alert extension for Chrome
The Password Alert chrome extension checks each page that users visit to see if that page is impersonating Google’s sign-in page and notifies admins if users enter their G Suite credentials anywhere other than the Google sign-in page.

Admins can enforce deployment of the Password Alert Chrome extension from the Google Admin console (Device management > App Management > Password Alert)—just sign in and get started. You should check “Force installation” under both “User Settings” and “Public session settings.”

password-alert

Admins can also enable password alert auditing, send email alerts and enforce a password change policy when G Suite credentials have been used on a non-trusted website such as a phishing site.

3. Allow only trusted apps to access your data
Take advantage of OAuth apps whitelisting to specify which apps can access your users’ G Suite data. With this setting, users can grant access to their G Suite apps’ data only to whitelisted apps. This prevents malicious apps from tricking users into accidentally granting unauthorized access. Apps can be whitelisted by admins in the Admin console under G Suite API Permissions.

api-permissions
4. Publish a DMARC policy for your organization
To help your business avoid damage to its reputation from phishing attacks and impersonators, G Suite follows the DMARC standard. DMARC empowers domain owners to decide how Gmail and other participating email providers handle unauthenticated emails coming from your domain. By defining a policy and turning on DKIM email signing, you can ensure that emails that claim to be from your organization, are actually from you.5. Disable POP and IMAP access for those who don’t need it
The Gmail clients (AndroidiOSWeb) leverage Google Safe Browsing to incorporate anti-phishing security measures such as disabling suspicious links and attachments and displaying warnings to users to deter them from clicking on suspicious links.

By choosing to disable POP and IMAP, admins can ensure that all G Suite users will only use Gmail clients and benefit from the built-in phishing protections that they provide. POP and IMAP access can be disabled by admins at the organizational unit level.

Note: all third-party email clients including native mobile mail clients will stop working if POP and IMAP are disabled.

end-user-accessalert
6. Encourage your team to pay attention to external reply warnings
By default, Gmail clients (AndroidWeb) warn G Suite users if they’re responding to emails sent from outside their domain by someone they don’t regularly interact with, or from someone not in their contacts. This helps businesses protect against forged emails, from malicious actors or just plain old user-error like sending an email to the wrong contact. Educate your employees to look for these warnings and be careful before responding to unrecognized senders. Unintended external reply warnings are controlled by the Admin console control in the “Advanced Gmail” setting.
external-warnings
7. Enforce the use of Android work profiles
Work profiles allow you to separate your organization’s apps from personal apps, keeping personal and corporate data separate. By using integrated device management within G Suite to enforce the use of work profiles, you can whitelist applications that access corporate data and block installation of apps from unknown sources. You now have complete control over which apps have access to your corporate data.
android-settings
These steps can help you improve your organization’s security posture and become more resistant to phishing attacks. Learn more at gsuite.google.com/security or sign up for our security webinar on September 20, 2017, which features new security research from Forrester and a demonstration on how the cloud can help effectively combat cyber threats.

Reference by Google.com

Drive File Stream launching to all G Suite customers

Launched to early adopters in March, Drive File Stream is a new desktop application that allows you to quickly access all of your Google Drive files on demand, directly from your computer, meaning you use almost none of your hard drive space and spend less time waiting for files to sync.

Starting today, you’ll see settings in the Admin console for Drive File Stream (located at Apps > G Suite > Drive and Docs > Data Access). Note—these settings won’t go into effect for your users until Tuesday, September 26th, when Drive File Stream becomes generally available.

 

Drive File Stream

As of today, Drive File Stream will be turned ON for all customers, but we’ll only show download links in the Drive interface if you currently show them for Backup and Sync / Google Drive for Mac/PC. For more information on how to turn Drive File Stream on or off in your domain, check out the Help Center.

With this launch, Google Drive for Mac/PC is officially deprecated. It will no longer be supported starting on December 11th, 2017, and it will shut down completely on March 12th, 2018. We encourage you to use Drive File Stream. As an alternative to or in addition to installing Drive File Stream, you can upgrade to the new version of Drive for Mac/PC, called Backup and Sync.

A few important things to note:

  • In October, Drive for Mac/PC users may start seeing messages in the product notifying them that Drive for Mac/PC is going away.
  • If a user is running both Drive File Stream and Backup and Sync on the same machine, they’ll be prompted to stop syncing My Drive with Backup and Sync in order to save disk space.
  • Team Drive editors won’t be able to edit their Team Drive files when they’re opened in Drive File Stream; they’ll only be able to view them. To edit these files, they’ll need to open them in Drive on the web.

Check out the Help Center for more information on Drive File Stream, including:

  • A side-by-side feature comparison with Backup and Sync.
  • Instructions for turning on Drive File Stream and deploying it to your organization.
  • Sample emails you can send to your users with more information.
  • FAQs.

Say goodbye to time-consuming file syncing and any concerns about disk space. With Drive File Stream, all your files are always ready for you and your colleagues.

Launch Details
Release track:

  • Drive File Stream Admin console settings launching to both Rapid Release and Scheduled Release on September 6th, 2017; Drive File Stream launching to end users on both Rapid Release and Scheduled Release on September 26th, 2017
  • Support for Google Drive for Mac/PC ending on December 11th, 2017; Google Drive for Mac/PC to stop working on March 12, 2018


Editions:

Available to all G Suite editions

Rollout pace:

  • Admin console settings
    • Gradual rollout (up to 15 days for feature visibility)
  • Availability for end users
    • Full rollout (1–3 days for feature visibility)

 

Reference by Google.com

Google’s Contacts app (v2.1) now available for more Android devices

Google’s Contacts app is now available for any device running Android 5.0 (Lollipop) or higher, including Samsung, LG, Motorola, and others.

Android users in your organization can now download version 2.1 of the Contacts app from the Play Store. This version features:

  • A simple way to move contacts from a device’s storage into a Google Account, so the contacts are safely backed up and available on all devices.
  • Clear separation between work and personal contacts.
  • Suggestions for adding new contacts, cleaning up duplicates, and more.

For more information on using the Contacts app on Android devices, check out this Help Center article.

Launch Details
Release track:
Launching to both Rapid Release and Scheduled Release

Editions:
Available to all G Suite editions

Rollout pace:
Full rollout (1–3 days for feature visibility)

Impact:
All end users

Action:
Change management suggested/FYI

 

Reference by Google.com

Don’t get hooked! Protect yourself from Phishing attacks.

Google Drive firewall and proxy settings

In order for users on your network to access Google Drive on the web, the Google Drive sync client, and Google Docs editors, your firewall rules should connect to the following hosts and ports. Otherwise, users may be blocked or denied access these services.

For the following hosts, [N] means any single decimal digit and * means any string not containing a period.

  • www.google.com:443/HTTPS
  • accounts.google.com:443/HTTPS
  • googledrive.com:443/HTTPS
  • drive.google.com:443/HTTPS
  • *.drive.google.com:443/HTTPS
  • docs.google.com:443/HTTPS
  • *.docs.google.com:443/HTTPS
  • *.c.docs.google.com:443/HTTPS
  • sheets.google.com:443/HTTPS
  • slides.google.com:443/HTTPS
  • talk.google.com:5222/XMPP (needed only for the Drive sync client)
  • gg.google.com:443/HTTPS
  • script.google.com:443/HTTPS
  • ssl.google-analytics.com:443/HTTPS
  • video.google.com:443/HTTPS
  • s.ytimg.com:443/HTTPS
  • apis.google.com:443/HTTPS
  • *.googleapis.com:443/HTTPS
  • *.googleusercontent.com:443/HTTPS
  • *.gstatic.com:443/HTTPS
  • lh[N].google.com:443/HTTPS
  • [N].client-channel.google.com:443/HTTPS
  • clients[N].google.com:443/HTTPS

Important notes

  • The IP addresses that various domain names resolve to don’t necessarily fall within any given address range.
  • Other Google properties may use the IP addresses that Drive uses.Google.com
  • Techniques that Drive uses to connect to Google servers depend on the browser, browser version, network conditions, etc.
  • Even if you don’t currently observe activity at the addresses listed above in a particular Google product there could be future activity.
  • The Drive sync client supports all unauthenticated proxies that are configured by the operating system.
  • The sync client supports the only DNS-based distribution of PAC files. PAC distribution over DHCP is not supported.

Reference by Google.com

Stay aware, stay secure with SBI Card!