准备GWS的域名，这个在第一章已经完成了，跳过。

打开或关闭某个Service，主要有以下几类

1. Google workspace,包括Gmail，Calendar,Drive,Docs等，属于核心服务
2. Additional Google Service,如Blogger，Google Books等，不属于GWS的技术支持范围
3. Marketplace apps,这些是第三方应用。

现在要针对所有用户，关闭Sites（谷歌网站）这个服务

然后再关闭Blogger服务，因为它不属于核心服务，所以要选择AdditionalGoogleService，然后找到Blogger，同样的方法OFF。

检查是否生效，从9个点处找到Sites，点击后发现无权访问。

针对某个OU进行前面关闭的Sites功能的ON操作

只选择Executive这个OU，然后选择Sites，ON（Override）即可
再关闭GoogleChat，有点奇怪的Chat没有3个点可以直接OFF，需要点开后再OFF

针对Groups，ON某一个服务
新开一个Edge浏览器的无痕浏览，然后以Ellie.gray的账号登录，确认她无法访问GoogleSites

创建一个新Group，

添加Ellie到该组，然后切换到Apps>Google Workspace>Service Status,Groups搜索，找到Access.Sites,然后在右侧找到Sites，选择TURN ON
再次访问Sites，发现已经可以打开了。

设置服务的发布通道（快慢）

For a domain that has implemented an organizational hierarchy, at what levels can Google Workspace services such as Sites and Gmail be turned on AND off? (Choose 2)

1. At the domain level
2. At the organization level
3. At the OU level
4. At the group level

What is the correct pathway in the admin console to getting to Google Workspace core services list?

1. Admin Console > Apps > Additional Google services
2. Admin Console > Apps > SAML apps
3. Admin Console > Apps > Google Workspace
4. Admin Console > Apps > Marketplace apps

All Additional Google services are turned ON by default.

1. True
2. False

Which four of these apps are Google Workspace core services that are covered in the Google Workspace Terms of Service? (Choose 3)

1. Sites
2. Blogger
3. Currents
4. Google Drive
5. Google Calendar

## 练习1
配置Gmail的通用用户设置

1. 允许用户选择自己喜欢的主题
2. 不允许邮件发送已读回执
3. 允许用户代理访问邮箱
4. 允许离线Gmail
5. 不允许外包商代理访问邮箱或是使用离线Gmail

再选择Contractors的OU，关闭Gmail离线模式，也关闭邮件代理访问。

针对Executives的OU打开GWS同步功能
公司只允许对管理层开放GWSMO（GWS与Outlook的同步）。

Apps>Google Workspace>Gmail>End User Access,找到POP and IMAP access,对整个公司关闭IMAP和POP访问。

关闭Sync，然后只选择管理层，再打开Sync即可。
https://support.google.com/a/answer/4455451?hl=zh-Hans&ref_topic=22447&sjid=13335410792753334229-AP
如果公司有用户想使用Outlook而不是网页版，那么他们可以使用GWSMO。如果想把所有数据迁移至GWS，则可以使用迁移工具GWMMO。

配置合规性政策
IT经理想遵循Google的最佳实践，一个是在邮件末尾添加合规脚注（对外邮件），另一个是禁止用户收到包含视频，多媒体或是音乐附件的外部邮件。


附件设定如下：



确认效果：

Which of the following actions can be taken on a message when an attachment compliance rule is matched? (Choose 3)

1. Modify message
2. Reject message
3. Deliver message
4. Quarantine message

Which of these settings do the users control from their Gmail settings? (Choose 2)

1. Create a personal email alias
2. Name format (eg. First, Last)
3. Add POP3 accounts to the user's inbox
4. Display language for the Gmail interface

Which of the following settings cannot be set from the Gmail service settings?

1. Default language
2. Name format
3. Allow users to delegate access to their mailbox
4. Allow users to set Gmail themes

## 练习1
设置日历共享
公司想允许内部，但禁止外部共享日历，对外只能显示闲/忙

默认对外只显示闲/忙

再设定第二日历，对外只显示闲/忙

设置日历资源
所有用户可以预订会议室，但是Boardroom只有Ellie可以预定，这类似于役员会议室只有高管可以预定一样。
试用的Business Plus版本好像无法查看练习步骤中的内容，这个练习跳过。

What are Calendar Resources? (Choose 2)

1. Bookable conference rooms
2. Contacts
3. Bookable equipment
4. Calendar dates

What can users control when it comes to their Calendar?

1. Users control what they share externally from their secondary calendars
2. Users control what they share externally from their primary calendar
3. Users can create their own resources
4. Users control what they share internally

Which Calendar settings can an administrator control for everyone in the organization? (Choose 2)

1. Default level of internal sharing for primary calendar
2. Calendar delegation to other users
3. Highest level of external sharing for primary calendars
4. Access to individual calendar labs
5. Time zone selections for calendar display

What are recommended to be configured before adding resources to the organization? (Choose 2)

1. Features
2. Groups to provide access to each resource
3. Locations
4. Buildings