We use Google Apps as our primary email service provider.
We would like to monitor/restrict users who are accessing their Google Apps accounts outside of the organization's local domain (outside of the office)
Any ideas of how this can be achieved?
Domain – Google Apps – Restrict email access outside of the office domain
domaing-suitemonitoring
Related Solutions
No there is nothing you can do with DNS. There is probably no way for Google apps mail to directly feed to a pipe.
You could either setup an alias in google apps that forwards to an email address that is hosted on your ticket system server.
You could also setup something like fetchmail to retrieve the email via pop/imap and then send the received messages to ticket system. Here is a page about how to use fetchmail with rt. The exact details would depend on what ticketing system you are using.
You should be able to restrict inbound/outbound mail fairly simply. Under "Manage this domain" create a new organization under "Organization & Users". Name it "Restricted users" or some such.
Select the user account(s) you want to restrict. Select "Move to" and choose your new organization.
Under "Advanced tools" scroll down to "Restricted email delivery". Add the organization you just created and do not add any domains under the "Allowed" list. Any member of this organization will now be unable to send/receive new mail.
You can also limit the features of Google Apps (e.g. Docs, chat, Picasa, etc) using the same organization. Here is Google's documentation on the Restrict email delivery feature.
Best Answer
If you have a premium account (Google Apps for Business, Education, or ISPs), is it possible by using the SSO. More details here.
As I have read, google apps will not do this. But, they offer you the feature to allow your SSO application to manage the access and permissions.
So, you can authenticate users from an AD and in the SSO to verify the IP of the user and limit access if is not in a specified range.