Posted:


Google Apps Vault helps businesses, schools, and governments of all sizes archive, retain and manage business business-critical information. Vault also helps with continuity, compliance, and regulatory purposes. Last January, the introduction of targeted legal holds gave our customers even more control over the emails they retain by restricting holds to searchable criteria.

Now, Vault customers can assign Vault privileges based organization units (OU). This allows customers to limit specific administrators to search and export only specific OUs, addressing privacy and security concerns over allowing administrators to access all licensed Vault users in a domain. Last month, we launched OU-based search, which lets Vault administrators search for data within a specific OU. Vault’s OU-based search and OU-restricted search reduce the number of irrelevant search results that a domain-wide search can produce, and eliminates the need to specify individual accounts. For example, if your OUs are structured by geography, you can restrict your administrator based in London to only search your users in Europe.

To learn more about Vault, please visit our Vault Help Center.

Posted:


Google Apps helps millions of businesses, schools and governments get work done with easy to use apps that are built for the cloud. Working in the cloud not only makes it easier to get things done, but also allows new insights into how your organization is using Google Apps. Starting today, we’re introducing a new Reports section to the Admin console to make it easier for admins to manage Google Apps and also gain insights that help their entire organization run more efficiently.

See a snapshot of all activity
The Highlights page, located in the new Reports section, gives you a quick overview of all the activity across your domain. You can see how many Hangouts, Docs, Sheets and Slides your organization created, who is close to reaching their Drive and Gmail storage quota and how many files have been shared outside the company. You can also export any report to Google Sheets to slice and dice your data for further analysis.
Drill down to user level Reports
The Apps Usage Activity page shows data on how individual users are working with Gmail, Drive, storage and other apps. Choose what information you want to see and move the columns around to customize your view.

Filters
Use filters to quickly find who owns a specific file, people with a high number of uploads and shares, and granular data such as all the people who have between 1000 and 2000 documents.
Security
The Security page is another customizable user report that provides security related information like 2-step verification enrollment, how many files are shared externally, the number of external apps that are installed and other important information like account status and Gmail IMAP usage. Like the Apps Usage Activity report, Admins can customize column names and apply sorting and filters on the columns.

Login Audit
Monitor any security concerns by reviewing the specific IP addresses and dates of all logins and any failed or suspicious logins on the Login Audit page. Admins can use this report to track suspicious activity and take corrective action like resetting passwords.

To use the new Reports page, go to your Admin console and click on the Reports icon or the View Reports link on the right side panel. Mobile data will be added soon, in the meantime you can revert to the old Reports if needed. We have many additions planned for the future so stay tuned.


Posted:


Bring your own device (BYOD) is no longer just a trend — it’s how business gets done. With thousands of mobile applications to choose from and an increasing number of websites optimized for mobile, today’s employees can work whenever and wherever they choose. It also means IT organizations now have the dual challenge of both helping employees be more productive and protecting corporate data.

We're adding new features to Google Apps Mobile Management for Android to help your organization meet these challenges head on:

  1. Inactive account wipe: Set policies that will wipe an inactive account from a device if it has not been synced for a predetermined number of days, so a lost device that wasn’t reported or the old device left in a drawer does not cause a security risk.
  2. Support for EAP-based WiFi Networks: Configure settings and distribute certificate authority (CA) based certs for EAP networks.
  3. Compromised device detection: Set policies that will detect signals for common forms of a compromised device, such as “rooting” or installing a custom "ROM", and block that device.
  4. Additional reporting fields: Access new reporting fields via the API and Admin console to better understand the devices that are in use and troubleshoot issues. Additional fields include: Serial number, IMEI, MEID, WiFi MAC address, baseband version, kernel version, build number, mobile operator/carrier, language settings, and account ownership/management.

To learn more about these mobile device management features visit our Help Center. You can also visit the Google Admin console at admin.google.com to enable this service to help you rest assured that your corporate data stays safe.

Posted:


Last year we launched the Google Admin app for Android that enabled administrators to easily add users, reset passwords, see audit logs and contact support.

Today we’re launching the Google Admin app for iOS so admins can take care of common tasks on the go directly from their iPhones or iPads.

This app is designed for admins and requires API access to be enabled. Install the Google Admin app for iOS or Android. To learn more, visit the Help Center.



Posted:


Google Apps Vault helps protect organizations of all sizes by enabling them to quickly find and preserve email messages that may be relevant to litigation, thereby reducing investigation costs. Vault also helps manage and preserve business-critical information for continuity, compliance, and regulatory purposes. Last year, the introduction of partial domain licensing allowed Vault customers to save money by buying Vault only for specific users or organizational units.

Today, we're going a step further by offering targeted legal holds, which give customers even more control over the emails they retain. While it's still possible to hold a user's entire mailbox, customers can also target the specific information they need to preserve for a legal hold based on any searchable criteria, including sent date, labels, content or search terms. Targeted legal holds allow Vault customers to preserve fewer emails and focus on the more relevant messages, helping reduce the costs and risks associated with managing and reviewing data.

Google Apps Vault helps thousands of businesses, schools, and governments archive, retain, and manage business-critical information. You can add Vault to an existing Apps account, or purchase it in conjunction with Apps, for $5 per user per month. If you purchased Google Apps online directly from Google, you can purchase Vault from your Apps Admin Console. If you purchased Vault from a reseller partner, please contact them to purchase additional Vault users. And, finally, please contact us if you are a Google Apps for Education or Government customer interested in Vault.

Posted:


There are thousands of third-party applications that integrate with Google Apps for Business to help people to do more on the web and accomplish specific business tasks. These include apps like Mavenlink (project management), Insightly (customer relationship management), and myERP (business management). Starting today, administrators will be able to find, manage and deploy third-party applications, like these, directly from the Google Apps Admin console.

To start, over twenty third-party applications will be available in the Admin console. These applications all offer the latest OAuth 2.0 security, single sign-on (SSO), and integration with Google services. Admins can now see reviews from verified users of the applications to help select the best app to meet their needs. As additional applications are updated, they will become available to Admins directly from the Admin console. In the meantime, all third-party applications are available as always in the Google Apps Marketplace.

Many admins have asked for greater control of third-party applications. With this upgrade, third-party applications are moving to OAuth 2.0. This means admins can deploy applications only to specific people or organizational units (rather than the entire company) and developers can design apps to request more narrow access to corporate information.

To learn more about how to add third-party applications that work with Google Apps for Business, visit our Help Center.

If you are a developer and would like to learn more about these changes and to see how to migrate your application for easier development and deployment, visit the Google Apps Developer website.

Posted:


More than ever, people are bringing their own mobile phones and tablets to work. This "bring your own device" (BYOD) trend appeals to companies that want their employees to be productive on the go, with devices they enjoy using. As an admin, your role in a BYOD environment is to make sure users keep their mobile devices secure.

Comprehensive mobile device management is included with Google Apps for Business, Government and Education. Organizations large and small can manage smartphones and tablets - including Android and iOS - right from the Google Apps Admin console, with no need for special hardware or software.

Today we’re adding new Android device management features based on top requests from our customers.
  1. Selective wipe - Remove Google Apps account data without wiping a user’s entire device. 
  2. SD card wipe - During a full device wipe, wipe SD cards in addition to the internal memory.
  3. Device Policy app - Ensure that security policies are enforced across all devices by requiring the latest version of the Device Policy app. 
  4. Wi-Fi configuration - Enter wi-fi settings in the Admin console once -- and they'll be automatically pushed out to all managed Android devices.
Android users can stay connected on the go with mobile apps like Gmail, Drive and Hangouts. Admins can manage their domain with the new mobile Admin app. And admins can let employees bring their own devices to work while keeping those devices secure and saving their employees time with Google Apps device management.

To learn more about these mobile device management features, visit our Help Center or start managing devices right away by visiting your Admin console at admin.google.com.

Posted:


To make it easier for Google Apps administrators to manage their users, services and devices, we recently announced a redesigned Admin console. Two weeks ago, we made the new Admin SDK available to developers who want to build customized tools for organizations that use Google Apps.

Today we're launching the Google Admin app for Android devices. The Admin app makes it easy for admins to use their Android phone or tablet to accomplish the most common tasks—such as quickly adding or suspending users, resetting passwords, managing group memberships, and directly calling or emailing specific users.



This app is designed for admins and requires API access to be enabled. Install the Google Admin app from Google Play. To learn more or contact support, visit the Help Center.

Posted:


Yesterday, we kicked off the 6th annual Google I/O developer conference, with over 6,000 people attending live in San Francisco and millions more around the world tuning in to the livestream. The conference this year focused on a growing trend that affects our lives at home, at work and at school: the move towards a multi-screen world. In this world, tablets and mobile phones are quickly becoming as commonplace—and as useful—as desktop and laptop computers.

As you shift between devices, your experience should be seamless. And the same tools you use in your personal life should be available in the workplace, so you can work the way you live. To that end, here are some highlights from this week that are particularly relevant to our business, government and education customers—including tools for developers, features to simplify your life, and new ways to connect and collaborate with others.

Tools for developers:
  • Google Cloud Platform: We announced that Google Compute Engine—which provides a fast, consistently high-performance environment for running virtual machines—is now available to anyone by visiting cloud.google.com. We also introduced Google Cloud Datastore, added the PHP runtime to Google App Engine, and added sub-hour billing charges so you don’t pay for compute minutes that you don’t use. 
  • Admin SDK: The new Admin SDK lets developers build customized administrative tools for organizations that use Google Apps. The SDK consolidates many of the existing domain APIs into a new uniform structure and introduces new functionality with the Directory API and Reports API. 
  • Google+ API for businesses: The new Google+ API for businesses is now available as a pilot for developers who want to build apps that handle tasks like auto-provisioning Circles and reading or writing posts.
Simplify your life:
  • Gmail: New quick action buttons in Gmail are designed to help you get things done faster and take action on an email without ever having to open it -- like opening a Google document that’s been shared with you or responding to a calendar invitation. And we’re beginning to roll out a new integration between Google Wallet and Gmail, so you can quickly and securely send money to friends and colleagues directly within Gmail—even if they don’t have a Gmail address. 
  • Unified storage: Google Apps customers will now have 30 GB of unified storage to use between Drive, Gmail, and Google+ photos. Just as before, files created in Docs, Sheets and Slides don't count against your storage quota. As a result of this change, Gmail inboxes for Google Apps customers are no longer limited to 25 GB -- any additional storage you purchase can be shared and used by Gmail. 
  • Nexus tablets and Google Play for Education: There are now 25 million students, faculty and staff around the world using Google Apps for Education. Later this year, Google will expand its education offering beyond Chromebooks and Apps to include Nexus tablets and Google Play for Education. Schools will be able to efficiently manage tablets and discover, purchase and distribute content and applications with ease. Schools who want to receive information about the program when it launches later this year should complete the interest form available at google.com/edu/android.
Connect and collaborate with others:
  • Google+: The new look and feel for Google+ brings a modern design to the stream and makes it easier than ever for you to connect with colleagues and quickly learn more about topics or posts that interest you. The new Google+ also looks and feels the same across all your devices.
  • Hangouts: Apps customers now have the option to replace chat in Gmail and Talk on Android with a new version of Hangouts that combines text, photos and live video calls across desktops, laptops, as well as Android and iOS phones and tablets. The new Hangouts is designed to help bring all of your real-life conversations online, across any device or platform. Just as before, Apps customers can invite up to 15 colleagues to a video call.
Hangouts brings video calls and messaging across all you devices

Work doesn’t always need to feel like work. Technology should make your life easier, so you can get work done more efficiently and focus on what really matters: building your business, teaching your students, or serving your constituents.

Google I/O continues through the end of tomorrow. Tune in to live sessions at google.com/io.

Posted:


Every day, millions of businesses, schools and government agencies rely on Google Apps to get their work done. And each of these organizations has an administrator (or a team of admins) responsible for tasks like creating new accounts, managing mobile devices, and specifying exactly which products and features their employees can use.

Starting today, we’re introducing a few changes to the Google Admin console to make it easier for admins to do their jobs:

  • Accomplish tasks faster: Navigating to the right setting should be fast, and with new logical groupings admins can find settings like delegated administration right under the Admin Roles control.
  • Customize the Admin console: Drag and drop the controls you need into the place that makes sense -- and remove the ones you don't need.
  • Get to the Admin console more easily: There is no need to remember a long URL like google.com/a/domain.com or search for the “manage domain” link in Gmail. Just type the new URL (admin.google.com) and log in directly to the Admin console.

These changes to the Admin console will be rolling out to existing customers over the next few weeks. To learn more about the new Admin console, visit the what's new site or contact our support team that is available by phone or email 24/7.

Posted:


The Google Play Store is the place to find Android apps like the Google+ app, the Google Drive app and hundreds of thousands more. Today we’re expanding the Google Play Store for our Google Apps customers to help you distribute internal apps to your employees through the Google Play Private Channel.

Whether you’ve built a custom expense reporting app for employees or a conference room finder, the Google Play Private Channel is designed to make your organization’s internal apps quick and easy for employees to find. Once your company has loaded these internal apps using the Google Play Developer Console, users just need to log in with their company email address to browse the Private Channel and download apps.


These changes make it easier than ever to get the internal Android apps your company develops into employees’ hands. If you’re a Google Apps for Business, Education or Government customer you can learn more about how to create your organization’s own Google Play Private Channel in our Help Center.

Posted:


Today, we're improving the Google Apps administrator control panel for international and multi-lingual administrators. Now, the control panel will always be displayed in the user’s preferred language.

New administrator settings for Google+, displayed in Japanese

Previously, administrators had to choose between viewing the administrator control panel in English to receive the very latest features or wait until new features had been translated into their preferred language. Now, the administrator control panel makes new features available in all supported languages at the same time.

This change is rolling out to customers over the course of the day.

Posted:

Since we launched Google Apps Vault, many businesses have adopted it to archive, retain and manage business critical information. Starting today, Vault is available for Google Apps for Government customers. Federal, state and local agencies in the United States can now purchase Vault to help meet their compliance needs.

Google Apps Vault helps protect organizations of all sizes from legal and compliance risks through advanced message archiving, retention and eDiscovery capabilities. It provides the ability to quickly search, identify, preserve and export information in response to litigation, investigation, compliance audits, or Freedom of Information Act (FOIA) requests. Vault helps organizations cull through their data and find messages relevant to such requests, reducing the associated time, effort, and costs.

Google Apps Vault can also be used to address knowledge management needs. It enables authorized users to search, manage, and review data. For example, if an employee leaves abruptly and the organization needs to understand the status of the employee’s projects, Vault will help find the needed information. Customers using Vault can ensure that data with critical business information are preserved and can be reviewed.

Vault built on the same infrastructure as Google Apps and recently completed an SSAE 16 / ISAE 3402 Type II SOC 2 audit. Visit our Google Apps for Government page where you can find more details as well as contact our sales team.

Posted:


People are using phones and tablets more than ever before to get work done from anywhere – in the field, at home or while traveling. Along with this increase in flexibility and productivity come new challenges for businesses managing all of these mobile devices. We launched tools to manage mobile devices across all mobile platforms for Google Apps last year, and since then we’ve been hard at work adding a number of new capabilities to help organizations better manage smartphones and tablets.

Some of our newest features are focused on helping administrators enforce tighter security using mobile settings in the Apps control panel to keep company data safe. We now offer administrators more ways to promote strong passwords on users’ phones and tablets and allow policies that enforce data encryption. New features also let administrators set policies to allow or block the use of the phone’s camera on Android 4.0+ devices and comply with organizational email retention policies. And now administrators can enforce these policies where available without disabling phones running older versions of Android that don’t support all the latest policies.

Through the Google Apps Device Policy app, administrators have the ability to remotely erase data from lost or stolen devices. Now we’re extending this capability so that IT admins can grant end users the ability to remotely delete data from their phone as soon as they notice it’s missing using the My Devices page.



As employees increasingly depend on their phones and tablets we’ll continue to work on making it easier and more secure for organizations to manage their fleet of devices. You can watch this video or visit our Help Center for a detailed look at how our enterprise mobile offerings can benefit your business.

Posted:


Google Apps domain admins have access to a new tool – Gmail log search – that increases visibility into their email traffic. This feature in the Apps control panel allows domain admins to search through the Gmail delivery logs to investigate email delivery and traffic questions. Many domain admins have requested a self-service tool like this, and Gmail log search will make it easier to answer questions like: What happened to an inbound or outbound message? Was a message sent to my domain and marked as spam? Which users sent or received a specific message?

The information that is available in the log search feature includes:
  • Basic message information like Sender, Recipient, Subject, Date and Message-ID
  • Attachment size
  • Total transit time
  • Delivery status

This Gmail log search feature was built using Google BigQuery, a Google Cloud Platform product that allows developers to store and query large amounts of data. We chose BigQuery because it can analyze multi-terabyte data sets with billions of headers to deliver precise results in just a few seconds. Gmail log search will help domain admins have the same type of visibility into the operations of Google Apps that they are used to from the legacy, on-premise email systems.

Gmail log search will be available starting today to Google Apps for Business, Education and Government customers, and will roll out to all domains over the next few weeks. Learn more about the feature in the Google Apps Help Center.

Posted:


In March 2012, we launched Google Apps Vault, bringing enterprise-class information governance to Google Apps. Vault delivers retention, archiving and eDiscovery capabilities for email and chat messages, enabling businesses of all sizes to access and manage business-critical information. Vault offers true manage-in-place capabilities by applying retention policies directly to the Google Apps data, without the need to move, export, or create a copy of data in a separate location.

Google Apps Vault already archives, searches and manages messages in all languages that Google Apps supports (50+). Now the Google Apps Vault user interface is available in 28 languages, including double-byte languages like Japanese, Chinese and Arabic. This new, global Vault interface enables customers worldwide to more easily access and manage their data, further reducing the costs and risks that businesses today face.
"Google Apps Vault offers compelling capabilities and value for businesses around the world in preparing for litigation, investigation, and managing day-to-day business. Vault integrates seamlessly across the evolving Google platform while integrating with business and industries of all sizes. This is a key component in our forward thinking strategy to drive down costs and provide enhanced client service."

- Eric Hunter - Director of Knowledge, Innovation & Technology Strategies at Bradford & Barthel, LLP
Google Apps Vault is available for new and recent Google Apps for Business and Education customers. Existing customers will be able to deploy Google Apps Vault later this year.

Posted:


Keeping Google Apps accounts secure is important to us, and we've recently added two security features that can better protect user accounts. The first helps businesses deploy 2-step verification and the second enhances integration with Microsoft Active Directory®.

Since we launched 2-step verification, we’ve seen millions of users enable it and thousands more do so every day. 2-step verification requires two means of identification to sign in to a Google Apps account: something you know (a password) and something you have (a verification code from your mobile phone). Even if someone has stolen your password, they'll need more than that to access your account. This additional layer of security greatly reduces the chance of unauthorized access via account hijacking or other means.

Starting today, domain administrators can require the users in their domain to use 2-step verification. This new feature will help Google Apps customers accelerate their deployment of 2-step verification.

For businesses that use Microsoft Active Directory® (AD), we’ve added new capabilities to synchronize and manage passwords. Businesses can manage password policies (e.g. password strength, reset intervals, etc.) using AD and then synchronize from AD to Google Apps when passwords are changed. Passwords are transmitted hashed and encrypted during synchronization.

Learn how to configure this new 2-step verification policy in the Google Apps help center. Download the Google Apps Password Sync for Active Directory (GAPS), and learn how to configure it in the help center.

Posted:

Posted by Adam Dawes, Gmail Product Manager

Last year, we started integrating Postini’s business-class email security and management capabilities into Gmail and today we’re excited to be rolling out the latest round of integrated features. Google Apps administrators can now take advantage of improved email compliance footers, approved/blocked sender lists and file attachment policies. These capabilities help our customers address compliance requirements and effectively manage email traffic. Previously, Google Apps customers used Google Message Security, powered by Postini, to provide these capabilities.

With this new release, we’ve improved these features and designed them specifically to meet the needs of our Apps customers. Admins will manage the features natively in the Google Apps control panel (localized in 28 languages), leverage our granular policy framework to customize settings for different types of users, and join multiple rules together to address very targeted use cases.

These new features are available globally for Google Apps for Business, Google Apps for Government and Google Apps for Education editions.

Dominie Liang, IT Director at New Media Group in Hong Kong, was able to use the new features to quickly address his company’s compliance requirements:

"Our legal team wanted us to add a compliance note to all of our outbound email. Thanks to Google's new email feature set, we could easily add the rich text format disclaimer with Chinese characters to the email footer, and solved the issue within a minute."

George Krieger, Technical Services Manager, Mazda Raceway Laguna Seca, adds:

"The new message footers in Gmail have made it easy for us to standardize our email signatures and more effectively promote our race schedules. And I love the ability to delegate control of these to our Media department so they can change them when they want without having to call me. This is a major improvement for us."

With the addition of these features to Gmail, there is no longer a need to use Google Message Security (GMS) with Google Apps so we will no longer offer GMS to Google Apps customers. We’ll work with those customers currently using GMS to migrate their settings to these new features. For more information on these features and how customers can migrate to them please refer to this Google Apps Help Center article and the Transition Guide.

Posted:


(Cross-posted on the Google App Engine Blog and the Google Code Blog.)

Rapidly crunching terabytes of big data can lead to better business decisions, but this has traditionally required tremendous IT investments. Imagine a large online retailer that wants to provide better product recommendations by analyzing website usage and purchase patterns from millions of website visits. Or consider a car manufacturer that wants to maximize its advertising impact by learning how its last global campaign performed across billions of multimedia impressions. Fortune 500 companies struggle to unlock the potential of data, so it’s no surprise that it’s been even harder for smaller businesses.

We developed Google BigQuery Service for large-scale internal data analytics. At Google I/O last year, we opened a preview of the service to a limited number of enterprises and developers. Today we're releasing some big improvements, and putting one of Google's most powerful data analysis systems into the hands of more companies of all sizes.
  • We’ve added a graphical user interface for analysts and developers to rapidly explore massive data through a web application.
  • We’ve made big improvements for customers accessing the service programmatically through the API. The new REST API lets you run multiple jobs in the background and manage tables and permissions with more granularity.
  • Whether you use the BigQuery web application or API, you can now write even more powerful queries with JOIN statements. This lets you run queries across multiple data tables, linked by data that tables have in common.
  • It’s also now easy to manage, secure, and share access to your data tables in BigQuery, and export query results to the desktop or to Google Cloud Storage.


Michael J. Franklin, Professor of Computer Science at UC Berkeley, remarked that BigQuery (internally known as Dremel) leverages “thousands of machines to process data at a scale that is simply jaw-dropping given the current state of the art.” We’re looking forward to helping businesses innovate faster by harnessing their own large data sets. BigQuery is available free of charge for now, and we’ll let customers know at least 30 days before the free period ends. We’re bringing on a new batch of pilot customers, so let us know if your business wants to test-drive BigQuery Service.

Posted:


These days it’s commonplace for employees to bring personal mobile devices to work, expecting to get all kinds of business done on-the-go, and this can be both a blessing and a challenge to IT managers. The importance of keeping mobile devices and data secure is as essential as ever.

Starting today, comprehensive mobile device management is available at no extra charge to Google Apps for Business, Government and Education users. Organizations large and small can manage Android, iOS and Windows Mobile devices right from the Google Apps control panel, with no special hardware or software to manage.

In addition to our existing mobile management capabilities, IT administrators can now see a holistic overview of all mobile devices that are syncing with Google Apps, and revoke access to individual devices as needed.


Organizations can also now define mobile policies such as password requirements and roaming sync preferences on a granular basis by user group.


Also available today, administrators have the ability to gain insights into mobile productivity within their organizations, complete with trends and analytics.


Finally, we’re also updating the Google Apps Device Policy app for Android. The new version provides users with more transparency about information available to administrators, and includes support for Android 4.0, Ice Cream Sandwich. These new mobile management features will roll out for customers using the Next Generation Release version of the control panel starting today, and will be coming to the Current Release version in a matter of weeks. We invite you to explore our help center for more details.