Clear search
Close search
Google apps
Main menu

    Transition steps for Postini Classic customers

    The steps for your service transition vary depending on your Postini customer type. If you’re a Postini Classic customer:

    • You use only Postini; you’re not using Google Apps.
    • You use a non-Gmail mail server.

    If you're a Postini Classic customer, follow these steps:

    1. Prepare for your transition
    • Configure your firewall—Prior to initiating your service transition, you must configure your email server and firewall to allow mail traffic from Google IP ranges. For instructions, see Allow email from Google IPs to your email server.  
    • Configure your SPF record—If you already have an SPF record, you’ll need to update your existing SPF record to include This will enable your SPF record to work with Google Apps and avoid failed delivery of outgoing mail. For instructions, see Configure SPF records to work with Google Apps.
      If you do not already have an SPF record, do not create a new SPF record until after your transition is complete. Partial or incomplete SPF records may cause delivery and spam classification issues.
    • Change your Google Apps Directory Sync (GADS) and Directory Sync Service (DSS) settings—If you already use GADS and DSS, you'll need to modify your GADS settings, and disable GADS and DSS before your service transition begins so that GADS does not make any changes.
      Do not enable or re-enable GADS until you're notified that your orgs, users, and settings have transitioned from Postini to Google Apps.
    • Verify ownership of your domains—If you haven’t yet verified ownership of your domains, you must complete this step before you can begin your transition. If this applies to you, you’ll receive an email from Google with details about which domains must be verified. If you fail to verify a domain, that domain will not be transitioned—including that domain’s users and settings, as well as any archive data (if you’re a Postini GMD customer).
      Create the following TXT record for each of the domains you wish to have automatically transitioned:
      For instructions, see Add TXT records to verify Postini domain ownership.
    • Confirm that your Postini admins have the correct administrative privileges—Before beginning your transition, make sure that only admins who need access to Postini have access. Assign root admin privileges to admins who are responsible for completing your transition steps, and remove privileges for admins who shouldn’t be allowed to progress the transition. Communicate the transition plan to any admins that typically should have these rights. For instructions on changing Postini permissions, see Viewing and Editing Authorization Records in the Message Security Administration Guide.
    2. Begin your service transition and update mail routing

    Transition Invitation email
    Once your account is eligible for transition, Google will send a Transition Invitation email to administrators for your domain as well as your organization's business contact. Your Transition Invitation email will provide a link to the Classic Transition Console, where you can log in using your Postini Admin Console username and password. You can then click the Begin Transition Now button to automatically move your orgs, users and email settings from Postini to Google Apps. Note: If your account includes multiple domains, you'll be given the option to select the primary domain for your account before you initiate your service transition in the Postini Transition Console.

    For detailed instructions, see Use the Postini Classic Transition Console.

    During the transition process, your mail flow is changed to route mail through Google Apps, and your filtering is now occurring in Google Apps. Postini is placed in passthrough mode—which means your mail is "passed through" from Postini to Google Apps. Your MX records will continue pointing to Postini temporarily, and your Postini Admin Console will be in read-only mode.

    Your Transition Invitation will specify the deadline to complete your transition—which is within 60 days of receiving this email. (Note that online customers will have 30 days to complete their transition. For details, see What's different if I purchased Postini online? in the Postini Transition Resource Center.)

    Confirmation emails
    For many domains, the process of moving your orgs, users, and settings from Postini to Google Apps will be completed within a few minutes, but it may take longer for many other domains. You'll receive a confirmation email when the process is completed, and the Transition Console will display updates so you can monitor the status of your transition.

    If you’re a GMD customer, you’ll receive two confirmation emails when this process is completed—one to notify you when your email security settings have been transferred, and another to notify you when your GMD archive data has been transferred. The automatic transfer of your GMD archive data depends on the size of your archive and likely will require a period of many weeks, so you won't receive these confirmation emails simultaneously.


    For GMD customers: Once you begin your transition, do not delete Google Apps users or remove their Google Vault license. Deleting user accounts or removing their Google Vault license can negatively affect your GMD data transition. You can suspend Google Apps users and apply a Vault Former Employee license without any negative effects. For instructions, see Assign Vault Former Employee licenses.

    3. Update your Google Apps Directory Sync (GADS) settings

    If you already use GADS—After you're notified that your orgs, users, and settings have transitioned to Google Apps, you'll need to create exclusion rules that prevent GADS from deleting the Google Apps user accounts created during your service transition for former employees, Postini-only users, and sharded user accounts. Then, enable GADS to synchronize user accounts.

    If you're a GMD customer transitioning to Google Vault, do not disable or delete any of your Google Apps user accounts either manually or via GADS during your service transition. Making changes to your existing user accounts before your transition is completed will negatively affect your GMD data transition.

    We will notify you when your GMD transition process is completed, after which time you may want to combine pre- and post-transition OU structures so that GADS manages all user accounts.

    4. Get started with Google Apps email settings
    Important: G Suite Terms of Service

    The G Suite Terms of Service (ToS) will be presented to all administrators who log in to the Google Admin console after orgs, users, and email settings transition from Postini, including administrators uninvolved with the transition.

    Occasionally, the Vault-Hangout amendment about product compatibility will also be presented to the first super administrator who logs in to the Google Admin console. If your organization will be using Hangouts, that administrator can choose either Continue using Hangouts to enable Hangouts or Disable Hangouts to opt in later. See Getting started with Google Hangouts for more information.

    After accepting the ToS and the Vault-Hangout amendment, if presented, administrators will have immediate access to the Admin console. The ToS and Vault-Hangout amendment will not be presented to users in your organization.

    Note: To ensure that API operations continue to function, ensure that all service accounts used for Google APIs accept the ToS and acknowledge the Vault-Hangout amendment.

    Once you receive confirmation that your GMS transition is completed (your orgs, users, and settings are moved to Google Apps), sign in to the Google Admin console to review your email security settings. See Get started with Google Apps email settings for a detailed mapping of Postini GMS features to Google Apps, and for links to important articles.

    5. GMD only: Get started with Google Vault

    If you are not a Google Message Discovery (GMD) customer transitioning to Google Vault, skip this step.

    The GMD transition process is similar to the process for Google Message Security (GMS). However, the automatic transfer of your GMD archive data depends on the size of your archive, and likely will require a period of many weeks.

    We’ll notify the root admin for your domain with a confirmation email when this process is completed. Once you receive confirmation that your GMD transition is completed, see Get started with Google Vault. This article provides guidance for using Vault after your service transition, and specifies details for performing many common tasks in Vault that are comparable to Postini archiving.

    6. Complete your transition

    You'll need to complete a few cleanup steps after your settings transition is complete; for example, changing your MX records from Postini to Google Apps. For instructions, see Steps to complete your transition.

    Note: For instructions about getting started with Google Apps and Google Vault after your service transition, see Get started with Google Apps email settings and Get started with Google Vault.
    If you're a reseller customer, please reach out to your reseller directly for questions regarding your transition. Google Cloud Support is available to assist you once you've been invited or have begun your transition.
    Was this article helpful?
    How can we improve it?
    Sign in to your account

    Get account-specific help by signing in with your G Suite account email address, or learn how to get started with G Suite.