Module 1: Google Apps Education Edition > Chapter 3: Customize Google Apps for your school
Table of Contents

Previous Chapter: Getting around Google Apps
» Chapter 3: Customize Google Apps for your school
Add/remove services for your domain
Customize products for your domain
Google Message Security
Email security settings in Google Apps
» Overview

Create a Walled Garden
Create school-wide 'groups' for email lists and sharing
More resources for Google Apps admins
Next Chapter: Google Apps FAQs

Google Apps for Education includes the ability to manage some email security settings directly within the Google Apps control panel.

Please note, to take advantage of these settings, you must be using the Next generation control panel.

Google Apps administrators can now create policies specifying who their users can communicate with over email, and administrators can tailor these policies for different groups of users.

By default, users with Gmail accounts at your domain can send mail to and receive mail from any other email address. In some cases, you want to restrict who your users can exchange mail with.

For example, school faculty and staff can have unrestricted email access while students have the freedom to send and receive emails within the school community but are protected from unwanted email interactions with outsiders.

The restrictions on email delivery apply to all users who belong to the organizational units you choose or to any organizational units that are its children in the organizational tree. Users in the children organizational units inherit the restrictions. Users who belong to other organizational units can exchange mail without restriction.

For example, the "student" organizational unit may also include "elementary" and "high school" sub-organizational units. If the "student" organizational unit is restricted to send and receive email only from myschool.org, users in both the "elementary" and "high school" organizational units will also have the same email restrictions to send and receive email only from myschool.org.

With the "Restrict email delivery" setting, you can list the domains that groups of users are allowed to exchange email with. Those users will then be able to send mail or receive mail from only email addresses at the listed domains. If a user attempts to send mail to a domain that is not listed, he or she sees a message saying that the organization has a policy prohibiting mail to that address, and the mail is not sent.

Users receive only authenticated messages from domains listed in the "Restrict email delivery" setting. Messages sent from unlisted domains — or messages from listed domains that can't be verified using DKIM or SPF records — are returned to the sender with a message about the policy.

Please note: To allow mail between users within your organization, you must include your school domain(s) in the list of permitted domains.