You can prevent users that have a personal email address but not a Google Workspace user account from creating an unmanaged Google Workspace user account in your domain. If their personal email address doesn’t exist in your domain, users can verify this address and create an unmanaged account.
To prevent unmanaged Google account creation, you have two options:
- Create a user for every person who has an email address in your domain. Go to Add an account for a new user.
If there are unmanaged accounts already created, you can use the Transfer Tool for unmanaged users to invite them to become managed users
- Configure your mail server to block the Google sign-up verification emails, using the following details:
- Envelope from (or Sender)—*@idverification.bounces.google.com
- Header from—[email protected]
- Subject—Verify your email address
Note: This text is language specific, and organizations whose employees have browsers configured in multiple languages might still receive blocked emails. For example, a Spanish user would see "Verifica tu dirección de correo electrónico,” and the email wouldn't be blocked.
Alternatively, instead of blocking emails by subject, you can allow Cloud Identity users to receive emails from idverification.bounces.google.com. This means that active users get the sign-up emails while emails to employees without Cloud Identity accounts are blocked.
