How to Properly Manage User Devices in Google Workspace

User Management

Home  >  Google Workspace Handbook  >  User Management  > How to Merge Domains in Google Workspace

Smartphones, laptops, tablets, and other possible devices have become huge part of our life in and out of the office. As the efficiency grows, so do the responsibilities of IT departments. That is caused by the requirement to manage organizational assets including keeping corporate data secure. 

If your organization uses Google Workspace the key solution to the problem is to set up proper device management. Google Admin console provides you with comprehensive device management. In the article you’ll learn the key aspects of the Devices section of your Google Admin console. 

Contents

Why you need to manage user devices in Google Workspace?

The primary reason why you need to manage user devices is Security. By managing user devices, administrators can enforce security policies, such as requiring strong passwords, enabling device encryption, and checking for potentially harmful apps. This helps protect sensitive data and ensures that only authorized individuals can access company resources.

Another key advantage of user device management is Data protection. Managing user devices allows administrators to remotely wipe devices in case of loss or theft, preventing unauthorized access to sensitive information. It also enables them to back up and restore data on devices, protecting against data loss.

What’s more is that proper user management assists Productivity and collaboration in a proper manner. By managing user devices, administrators can deploy and configure productivity tools and collaboration software, such as email clients, document editors, and video conferencing apps. This ensures that employees have the necessary tools to work efficiently and effectively.

How to manage mobile devices in Google Admin console

Google Admin console allows you to see what devices users employ, the actual OS version, first and last sync date. Among the key mobile device management functionalities are the ability to Wipe Account, Delete Device, View Audit Info. The console also allows you to review each device’s security, including Encryption status, Verified apps, OS security patch, Potential harmful apps presence. To access mobile devices management settings you need to follow the steps: 

  1. Access your Google Admin console.
  2. In the menu on the left go to Devices -> Overview -> Mobile devices.

In the opened menu you can see the list of mobile devices of your organization. From this page, you can do the following set of actions: 

  • You can Block Device by hovering over the undesired device.
  • You can Wipe Account by hovering over the line and clicking on the three dots -> click Wipe Account to perform the action.
  • To Delete Device, you need to hit the three dots next to the device you want to remove and click Delete Device.
  • If you click on the device name, you will go to the page where you can get access to Device information and Device security.
How to manage user devices on Google Admin console

How to manage endpoints in Google Admin console

The process of endpoints management in Google Admin console is barely different from mobile devices management. To access the list of endpoints you need to:

  1. Access your Google Admin console.
  2. In the menu on the left go to Device -> Overview -> Endpoints.
The functionality that you get in this page is pretty similar to what you get in the mobile devices management section:
  • You can Sign Out User by clicking on the three-dot icon next to the endpoint name.
  • The same way you can Delete Device by hitting three dots next to the app.

How to Set Up Two-Step Verification

Two-Step Verification is a commonly used measure for securing accounts. You can set up this measure in Google Workspace. To do that you need to have super admin privileges. Follow the steps to enable it:

  1. Access your Google Admin console.
  2. In the menu on the left go to Security -> Authentication -> 2-step verification.
  3. In the opened page you need to enable Enforcement by setting it On.
  4. You can also adjust New user enrollment period.
  5. Select Methods.
  6. Hit Save.

Google Admin console also allows you to set different settings for selected Organizational units. To do that select OUs in the left panel that you’d like to apply the changes to. 

How to set up 2-factor authentication on Google Admin console

How to Change Sync Settings

When it comes to mobile devices and endpoints management, you also have the option to tweak data access. It includes: 

  • Endpoint verification.
  • Android Sync. 
  • Google Sync. 
  • iOS Sync. 
  • Google Assistant. 
How to adjust sync settings for mobile devices on Google Admin console

To access this set of changes you need to:

  1. Access your Google Admin console.
  2. In the menu on the left go to Devices -> Mobile & endpoints -> Settings -> Universal.
  3. Click on each section you need to edit. 
  4. Hit Save.

How to Enforce Strong Passwords

Forcing strong passwords is another commonly used measure for enhanced security. When enabled it requires users to reset their password on a regular basis. To turn it on follow the  steps:

  1. Access your Google Admin console.
  2. In the menu on the left go to Security -> Authentication -> Password management.
  3. Check the Enforce strong password box.
  4. Set the minimum length.
  5. Set password reset frequency under Expiration.
  6. Hit Save.
How to enforce strong passwords on Google Admin console

Use Cases for Managing User Devices in Google Workspace

Managing user devices in Google Workspace is crucial for maintaining security, ensuring compliance, and enhancing productivity. This section provides practical scenarios where effective device management can make a significant difference. From securing remote work environments to streamlining the onboarding process, these use cases illustrate the real-world benefits of leveraging Google Workspace’s device management capabilities.

Remote Work Security

Scenario: A company has recently adopted a remote work policy, allowing employees to work from home or other locations.

Solution: By managing user devices through Google Workspace, the IT team can enforce security policies such as device encryption and screen locks. This ensures that sensitive company data remains protected even when accessed from personal devices.

Lost or Stolen Devices

Scenario: An employee loses their company-issued laptop while traveling.

Solution: The IT team can remotely wipe the lost device to prevent unauthorized access to company data. They can also track the device’s location to assist in recovery efforts.

Onboarding New Employees

Scenario: A new employee joins the company and needs access to various applications and data.

Solution: The IT team can quickly set up the new employee’s device with the necessary configurations and access permissions using the Google Admin Console. This streamlines the onboarding process and ensures the new hire is productive from day one.

Compliance and Auditing

Scenario: The company needs to comply with industry regulations that require strict data protection measures.

Solution: By managing user devices, the IT team can ensure that all devices comply with regulatory requirements. They can also generate audit reports to demonstrate compliance during inspections.

Application Management

Scenario: The company rolls out a new productivity application that all employees need to use.

Solution: The IT team can deploy the application across all managed devices, ensuring that every employee has access to the latest tools without needing to manually install the software on each device.

Device Lifecycle Management

Scenario: The company needs to upgrade its fleet of devices to the latest models.

Solution: The IT team can manage the transition by remotely configuring new devices and decommissioning old ones. This ensures a smooth transition with minimal disruption to employee productivity.

Explore Our Latest Blog Posts

Try Your New Email Signature Management Software