Tell me more ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.
up vote 1 down vote favorite

Is there any way to restrict access to Gmail accounts from certain IP/MAC addresses ? For instance, can I setup Google Apps so that my users can access their GMail account from within the corporate firewall or from outside the firewall on a known machine, but not from a public browser or public machine. Or what would be best practice to prevent unauthorized access to corporate GMail accounts?

share|improve this question

1 Answer

up vote 2 down vote

GMail has no IP or region restrictions. What you could do though is enable 2-step verification to add further protection?

This requires two steps in setting up, one at the domain level:

  1. Go to your Google Apps administrator control panel.
  2. Click the Advanced tools tab.
  3. Under Authentication > 2-step verification, check Allow users to turn on 2-factor authentication.

And the other on a per user basis:

Settings -> Accounts and Import -> Change Account Settings -> Other Google account settings -> Using 2-step verification

NOTE: The users have to manually opt-in even if you have this enabled at the domain level.

share|improve this answer
Is there any way of restricting when a user would need to use 2 step vs not? otherwise my users will never put up with it. – Johans the IT God Mar 17 '11 at 11:12
Appears not. Also even if you "switch it on" at the domain level, your users still have to manually opt-in themselves. And if they are anything like my users, that just isn't going to happen. Link to Google help: google.com/support/a/bin/answer.py?hl=en&answer=184711 – Digital Essence Mar 17 '11 at 11:22

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.