This is how we secure Workspace here at Fleet. We figured the guide could be useful to companies of a similar size. The next step would be to enable Endpoint Verification to control access to specific apps such as Drive so it could only be done from up to date, encrypted devices, but that requires a the highest Google subscription.
We've been meaning to write about this. You can actually do it with just Google Business, but you have to then also buy their Identity service, which I forget the name of. It's packaged into Enterprise edition but also sold separately.
We also reached out to sales and got a deal, explaining we didn't want to pay prices designed for companies with 1000s of employees.
Super cool, thanks so much for publishing. I’ll even use this for my families Google business personal emails - I have found the Google apps admin to be a bit intimidating and I was nervous to adjust defaults but the quarantine options seem very approachable and valuable.
It’s also been a while since I’ve seen a nice quick Mac OS security settings list to go ahead and toggle.
My only request would be additional guide for iOS security. The iVerify app suggests some good defaults
