4 ms·
As a business user of Google Workspace, it is a very different situation. Any one of our Super Admins (we have 3) can quickly unlock an account of any employee
by getoffmyyawn 4y ago
As a business user of Google Workspace, it is a very different situation. Any one of our Super Admins (we have 3) can quickly unlock an account of any employee that has been locked out. We can also adjust the sensitivity of the auto lockout. For example, we currently get notifications of "suspicious" logins but do not auto lockout the user.
- NoZebra120vClip 4y agoThat seems great for expediency, but it also seems to place the exposure to social engineering back on the org, who might not have the best tools to authenticate someone whose account is already in lockdown. For example, I'm a remote user, and if I got logged out of all company systems, I could phone my supervisor or send email from my personal account. Is that enough to assure the Super Admins that I am who I say I am?
- getoffmyyawn 4y agoNo, that wouldn't be enough. Our employees can only access the Google Workspace from managed devices and everyone is required to use 2fa. If your account is flagged for a suspicious login, we call you. Unlocking your account only allows access from your assigned managed devices. If you have forgotten your password or lost your 2fa token and/or managed device, you have to come to the office in person.