From 90564ff522500daf0732c5a6c3dc3cc92003afc9 Mon Sep 17 00:00:00 2001 From: "Max Dueltgen (MITRE)" <148897369+mdueltgen@users.noreply.github.com> Date: Thu, 9 Jan 2025 06:38:43 -0800 Subject: [PATCH] Updating Drive Docs 6.1 Implementation Steps (#560) * updating drive docs 6.1 implementation steps * cleaning up steps for 6.1 implementations steps * slight update/fixes * Apply suggestions from code review Co-authored-by: David Bui <105074908+buidav@users.noreply.github.com> --------- Co-authored-by: jkaufman-mitre <135844572+jkaufman-mitre@users.noreply.github.com> Co-authored-by: David Bui <105074908+buidav@users.noreply.github.com> --- scubagoggles/baselines/drive.md | 20 ++++++++++++-------- 1 file changed, 12 insertions(+), 8 deletions(-) diff --git a/scubagoggles/baselines/drive.md b/scubagoggles/baselines/drive.md index 44ff5532..c4924d7c 100644 --- a/scubagoggles/baselines/drive.md +++ b/scubagoggles/baselines/drive.md @@ -389,17 +389,21 @@ Google Drive for Desktop SHOULD be enabled only for authorized devices. To Disable Google Drive for Desktop: 1. Sign in to the [Google Admin Console](https://admin.google.com). -2. Select **Menu-\>Apps-\>Google Workspace-\>Drive and Docs-\>Google Drive for Desktop**. -3. Uncheck the **Allow Google Drive for desktop in your organization box** checkbox -4. Select **Save.** +2. Select **Menu-\>Apps-\>Google Workspace-\>Drive and Docs**. +3. Select **Google Drive for Desktop**. +4. Select **Enable Drive for Desktop**. +5. Uncheck the **Allow Google Drive for desktop in your organization** checkbox. +6. Select **Save.** To limit Google Drive for Desktop to authorized devices: 1. Sign in to the [Google Admin Console](https://admin.google.com). -2. Select **Menu-\>Apps-\>Google Workspace-\>Drive and Docs-\>Google Drive for Desktop**. -3. Check the **Allow Google Drive for desktop in your organization box** checkbox. -4. Check the **Only allow Google Drive for desktop on authorized devices checkbox**. -5. Ensure authorized devices are added to [company-owned inventory](https://support.google.com/a/answer/7129612?hl=en). -6. Select Save. +2. Select **Menu-\>Apps-\>Google Workspace-\>Drive and Docs**. +3. Select **Google Drive for Desktop**. +4. Select **Enable Drive for Desktop**. +5. Check the **Allow Google Drive for desktop in your organization** checkbox. +6. Check the **Only allow Google Drive for desktop on authorized devices checkbox**. +7. Ensure authorized devices are added to [company-owned inventory](https://support.google.com/a/answer/7129612?hl=en). +8. Select Save. Alternatively, [Context-Aware access policies](https://support.google.com/a/answer/9275380?hl=en) can be configured for more granular controls around authorized devices. The access level applied to Google Drive must have the "Apply to Google desktop and mobile apps" enabled to meet this requirement. For additional guidance, see the *Common Controls Minimum Viable Secure Baseline*, section "Context-Aware Access for All Devices that Connect to GWS SHOULD be Implemented."