Is there any way to restrict access to Gmail accounts from certain IP/MAC addresses ? For instance, can I setup Google Apps so that my users can access their GMail account from within the corporate firewall or from outside the firewall on a known machine, but not from a public browser or public machine. Or what would be best practice to prevent unauthorized access to corporate GMail accounts?

1 Answer 1


GMail has no IP or region restrictions. What you could do though is enable 2-step verification to add further protection?

This requires two steps in setting up, one at the domain level:

  1. Go to your Google Apps administrator control panel.
  2. Click the Advanced tools tab.
  3. Under Authentication > 2-step verification, check Allow users to turn on 2-factor authentication.

And the other on a per user basis:

Settings -> Accounts and Import -> Change Account Settings -> Other Google account settings -> Using 2-step verification

NOTE: The users have to manually opt-in even if you have this enabled at the domain level.

  • Is there any way of restricting when a user would need to use 2 step vs not? otherwise my users will never put up with it. Commented Mar 17, 2011 at 11:12
  • Appears not. Also even if you "switch it on" at the domain level, your users still have to manually opt-in themselves. And if they are anything like my users, that just isn't going to happen. Link to Google help: google.com/support/a/bin/answer.py?hl=en&answer=184711 Commented Mar 17, 2011 at 11:22

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.