Re: [External] [SECURITY] Google Workspace for Education domain shared files

[Kevin Wilcox <wilcoxkm () APPSTATE EDU>]

On Fri, 3 Sept 2021 at 11:04, Brian Amstutz
<brian.amstutz () asburyseminary edu> wrote:

> Do you know if there is a setting that prevents a user from sharing a Google Workspace file with the entire domain or 
> with anyone on the internet?

Yes, you can restrict sharing by OU membership to just your domain
(both in and out)

> Have you found a way to identify all of the domain shared (source:domain search) files AND un-share them from the 
> domain?

You can use the Drive API's setSharing() function to restrict access.
It's not exactly trivial but it's doable. Warning: for a large domain
(more than, say, 10k users, you're going to want to parallelise
it...when I used to script against 100k+ accounts, I discovered very
quickly that python threads actually aren't; the last few scripts I
worked on would saturate a 48-core, 128GB RAM system but could keyword
search + change labels for messages in 125k+ mailboxes in 15 - 20
minutes).

kmw

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community