准备GWS的域名，这个在第一章已经完成了，跳过。

打开或关闭某个Service，主要有以下几类

• Google workspace,包括Gmail，Calendar,Drive,Docs等，属于核心服务
• Additional Google Service,如Blogger，Google Books等，不属于GWS的技术支持范围
• Marketplace apps,这些是第三方应用。

现在要针对所有用户，关闭Sites（谷歌网站）这个服务

然后再关闭Blogger服务，因为它不属于核心服务，所以要选择AdditionalGoogleService，然后找到Blogger，同样的方法OFF。

检查是否生效，从9个点处找到Sites，点击后发现无权访问。

针对某个OU进行前面关闭的Sites功能的ON操作

只选择Executive这个OU，然后选择Sites，ON（Override）即可
再关闭GoogleChat，有点奇怪的Chat没有3个点可以直接OFF，需要点开后再OFF

针对Groups，ON某一个服务
新开一个Edge浏览器的无痕浏览，然后以Ellie.gray的账号登录，确认她无法访问GoogleSites

创建一个新Group，

添加Ellie到该组，然后切换到Apps>Google Workspace>Service Status,Groups搜索，找到Access.Sites,然后在右侧找到Sites，选择TURN ON
再次访问Sites，发现已经可以打开了。

设置服务的发布通道（快慢）

For a domain that has implemented an organizational hierarchy, at what levels can Google Workspace services such as Sites and Gmail be turned on AND off? (Choose 2)

• At the domain level
• At the organization level
• At the OU level
• At the group level

What is the correct pathway in the admin console to getting to Google Workspace core services list?

• Admin Console > Apps > Additional Google services
• Admin Console > Apps > SAML apps
• Admin Console > Apps > Google Workspace
• Admin Console > Apps > Marketplace apps

All Additional Google services are turned ON by default.

• True
• False

Which four of these apps are Google Workspace core services that are covered in the Google Workspace Terms of Service? (Choose 3)

• Sites
• Blogger
• Currents
• Google Drive
• Google Calendar

配置Gmail的通用用户设置

• 允许用户选择自己喜欢的主题
• 不允许邮件发送已读回执
• 允许用户代理访问邮箱
• 允许离线Gmail
• 不允许外包商代理访问邮箱或是使用离线Gmail

再选择Contractors的OU，关闭Gmail离线模式，也关闭邮件代理访问。

针对Executives的OU打开GWS同步功能
公司只允许对管理层开放GWSMO（GWS与Outlook的同步）。

Apps>Google Workspace>Gmail>End User Access,找到POP and IMAP access,对整个公司关闭IMAP和POP访问。

关闭Sync，然后只选择管理层，再打开Sync即可。
https://support.google.com/a/answer/4455451?hl=zh-Hans&ref_topic=22447&sjid=13335410792753334229-AP
如果公司有用户想使用Outlook而不是网页版，那么他们可以使用GWSMO。如果想把所有数据迁移至GWS，则可以使用迁移工具GWMMO。

配置合规性政策
IT经理想遵循Google的最佳实践，一个是在邮件末尾添加合规脚注（对外邮件），另一个是禁止用户收到包含视频，多媒体或是音乐附件的外部邮件。


附件设定如下：



确认效果：

Which of the following actions can be taken on a message when an attachment compliance rule is matched? (Choose 3)

• Modify message
• Reject message
• Deliver message
• Quarantine message

Which of these settings do the users control from their Gmail settings? (Choose 2)

• Create a personal email alias
• Name format (eg. First, Last)
• Add POP3 accounts to the user's inbox
• Display language for the Gmail interface

Which of the following settings cannot be set from the Gmail service settings?

• Default language
• Name format
• Allow users to delegate access to their mailbox
• Allow users to set Gmail themes

设置日历共享
公司想允许内部，但禁止外部共享日历，对外只能显示闲/忙

默认对外只显示闲/忙

再设定第二日历，对外只显示闲/忙

设置日历资源
所有用户可以预订会议室，但是Boardroom只有Ellie可以预定，这类似于役员会议室只有高管可以预定一样。
试用的Business Plus版本好像无法查看练习步骤中的内容，这个练习跳过。

What are Calendar Resources? (Choose 2)

• Bookable conference rooms
• Contacts
• Bookable equipment
• Calendar dates

What can users control when it comes to their Calendar?

• Users control what they share externally from their secondary calendars
• Users control what they share externally from their primary calendar
• Users can create their own resources
• Users control what they share internally

Which Calendar settings can an administrator control for everyone in the organization? (Choose 2)

• Default level of internal sharing for primary calendar
• Calendar delegation to other users
• Highest level of external sharing for primary calendars
• Access to individual calendar labs
• Time zone selections for calendar display

What are recommended to be configured before adding resources to the organization? (Choose 2)

• Features
• Groups to provide access to each resource
• Locations
• Buildings