We’ve begun rolling out Gemini and it’s been moving quickly in terms of updates and rollout. Here are our current settings that are letting users use it. Make sure your legal and compliance teams approve first!
Apps
User Access
Make sure you have a Gemini license, or your data may be used to train models
Service Status
Turn it on for OUs or just groups
Like many companies, my organziation uses Github and has multiple Github orgs under our umbrella. However, we don’t have Enterprise Managed Accounts for several reasons. But we have to closely monitor Github accounts due to SOX and compliance reasons and disable access when employees leave the company.
There is a round about way to do this with SCIM and Okta where you use an Okta app called “Github Enterprise Cloud – Organization“, enter your Github organization name, and setup SAML the way you normally would.
When I go to the Provisioning page and click to integrate the Okta app with the Github org, I frequently get an error saying “Error authenticating: Forbidden. Errors reported by remote server:”
After eons of troubleshooting, I’ve found the simplest solution is to make sure you are authenticated with Github, and then in the org you are trying to setup, go to this page: https://github.com/orgs/YOURORG/policies/applications/475360 and click the Approve button. What happened for me is that I wouldn’t see the Okta OAN integration app in our OAUTH apps page, and I couldn’t approve it. But it was waiting for approval. Going to that page above (which I could not find linked to anywhere) fixed the problem for me.
I’ve encountered this error in a few circumstances – users in Google Groups will have a red triangle and the text “Emails are Bouncing” that stops them from receiving any Google Group emails – definitely not good! I’ve seen this when former employees’ accounts are deactivated but not removed from Google Groups and then re-hired or activated later.
The fix is either remove and re-add them to their Google Group via GAM OR to have the employee go to groups.google.com, click the gear icon in the upper right, and click Global Settings.
From there, they should see under “Bounce Status” that their email is flagged as bouncing and a link that says “Resend request to recheck status” or something like that. After that, they’ll see a message that says “your email is not flagged as bouncing”. That’s it!
I ran into this one recently on a VM I run for Windows – I let the evaluation license expire but couldn’t recreate a new VM.
Even though I am logged in with an administor account, I do not have access to disable the service that checks and reboots the computer. To disable this service, you can do the following:
7. Now type whoami to confirm you are the system (as shown below)
Type services.msc as shown above
9. This will open services and now you can navigate to Windows License Monitoring Service and disable it
10. Restart the VM or computer and the service will be disabled, won’t start, and your machine will be good to go!
Deep within Microsoft’s documentation ecosystem lies this document – the order in which various spam filters are applied to incoming emails!
The order of processing for the email protection type: This order isn’t configurable, and is described in the following table:
| Order | Email protection | Category | Where to manage |
|---|---|---|---|
| 1 | Malware | CAT:MALW | Configure anti-malware policies in EOP |
| 2 | High confidence phishing | CAT:HPHSH | Configure anti-spam policies in EOP |
| 3 | Phishing | CAT:PHSH | Configure anti-spam policies in EOP |
| 4 | High confidence spam | CAT:HSPM | Configure anti-spam policies in EOP |
| 5 | Spoofing | CAT:SPOOF | Spoof intelligence insight in EOP |
| 6* | User impersonation (protected users) | CAT:UIMP | Configure anti-phishing policies in Microsoft Defender for Office 365 |
| 7* | Domain impersonation (protected domains) | CAT:DIMP | Configure anti-phishing policies in Microsoft Defender for Office 365 |
| 8* | Mailbox intelligence (contact graph) | CAT:GIMP | Configure anti-phishing policies in Microsoft Defender for Office 365 |
| 9 | Spam | CAT:SPM | Configure anti-spam policies in EOP |
| 10 | Bulk | CAT:BULK | Configure anti-spam policies in EOP |