We start by explaining how to sign up for a Google Apps subscription and then how to activate it. In the next section, we review the principal administration tasks. Managing user accounts is certainly the most important one. We describe the key settings of a Google Apps domain and various advanced settings like those related to integration within an SSO domain or to Google Analytics. The settings specific to applications are covered in the last section.
Google Apps exists in three editions: The Standard Edition, the Premier Edition, and the Education Edition. Here is a short summary of the features available in each of the three versions:
The first table in the introduction to Part 2 of this book contains more information on the costs and the list of services in each edition.
Recall that it is perfectly possible to first subscribe to a Standard edition, to rate the quality of the services and then, later, upgrade to a Premier version.
Here are the basic steps to register for a Google App account and then to activate the services. The activation of specific services was covered in Part 2 and in the last section of this chapter.
Registering for Google Apps begins with choosing the name of a domain. This is the name of the primary domain, which will be used by Gmail. Other domains may be added later, once the Google Apps have been activated. If, for instance, the domain name is my-company.com, the Gmail addresses will all take the form [email protected].
During the registration process, it will be necessary to confirm that changing the DNS records is indeed possible, otherwise the Google Apps services won't be operational.
Once the registration process is completed, the Google Apps administration console will look as shown in the following screenshot:
To prevent any abusive use of the Google Apps, domain name ownership must first be confirmed. The domain name should be registered with a registrar in case this has not yet been done.
There are two methods to confirm domain ownership. Both use a private key provided in the Google Apps administration console:
Before routing incoming mail to the Gmail servers, the administrator should create the user accounts that will match with the future recipients. There are actually several ways to do this (see the section dedicated to group and user creation that follows).
The exact procedure will depend on the situation:
For incoming mail to be routed to Gmail's servers, it is necessary to modify the MX records in the DNS console of the host with which the domain is registered. The details of the procedure will vary slightly from one host to another. The procedure is described in detail on the configuration page that shows up when the link "activate email" is clicked in the dashboard (see the following screenshot):
It is important to remember that an improper change of the MX records can have serious consequences when mail accounts preexist. Indeed, messages are simply lost in the case of an error.
This is the reason why the Google Apps console proposes using a temporary email address that is independent of the MX-records. It has the following form:
<username>@mycompany.test-google-a.com
Once the MX record has been modified, the final address, linked to the domain name will be used. It has the following form:
<username>@mycompany.com
When a pilot project is set up, there are still other solutions, which we shall describe in Chapter 13, The Pilot Project.
A wiza rd assists the user in the activation process. The automatic registration process starts once the terms of the contracts have been accepted by the administrator. The process can last up to one hour. The progress can be monitored directly in the Google Apps console.
The rest of the activation procedure for Postini services comes down to rerouting the incoming mail to the Postini services rather than directly to Gmail. Again, this is done by changing the MX-records. A wizard is available here as well. A delay of 24-48 hours may be necessary to ensure that the MX record changes propagate throughout the DNS tree.
Once th e Postini services have been activated, it's a good idea to check that mail indeed flows through them, and then to delete the now obsolete MX records.
A few more settings for Gmail need to be adjusted, in particular to ensure that no messages coming from Postini services will be considered as spam by the Google Apps filters. Details are provided by the activation wizard.
Recall that a detailed description of the features of Postini was given in Chapter 5, Security Tools.