You pay for Google Workspace every month, but does it ever feel like you are only using a fraction of what you are paying for? Maybe you set it up once, or someone else did, and you have never been quite sure it was done right. This guide walks through the Google Workspace best practices most small businesses skip, so you can stop second-guessing your setup and actually get your money’s worth.
Want Expert Help With Your Google Workspace?
Trusted by 10,000+ small businesses across 50+ countries, we help teams get the most out of Google Workspace every day.
Start My Concierge Membership: Get unlimited, all-you-can-eat tech support, training, and advice for you and your team. Ask us anything, anytime. Start Here
Talk to an Expert First: Not sure where the gaps are? Book a free consultation and we will map it out with you. Book a Call
What Are the Most Important Google Workspace Best Practices for Small Business?
Q: Why does my Google Workspace feel like it is not working properly?
A: Usually the basics were never configured. Most businesses get email flowing and stop there, leaving default sharing, security, and productivity features untouched. The platform works, but you are using a fraction of it, like owning a sports car and never leaving the slow lane.
Q: What are the first Google Workspace settings I should check?
A: Start with three: how new files are shared by default, whether two-step verification is enforced for everyone, and whether your DNS records (SPF, DKIM, DMARC) are set up correctly. These three protect your data, your accounts, and your email reputation.
Q: What are the key best practices to fix this?
A: Focus on four moves: lock down default file and calendar sharing so nothing is exposed by accident, switch on hidden features like delegated mail and Cloud Search, get your email DNS records right, and enforce two-step verification with proper shared drives.
Q: What is itGenius?
A: itGenius is an IT consultancy that helps small businesses scale effectively by providing affordable and effective technology services, specializing in Google Workspace support and strategy. We offer both transactional support and an “all-you-can-eat” Cloud Concierge subscription.
The “Ferrari in the Slow Lane” Problem
Google Workspace is a genuinely powerful platform, but like any tool, you only get the value out of it if you know how to drive it. We have said for years that buying Google Workspace and never learning to use it is like buying a Ferrari and driving it in the slow lane. The power is all there, you are just not using it.
Most businesses end up here through no fault of their own. Maybe Workspace appeared automatically when you built a site in Wix or Squarespace. Maybe a web host, a contractor, or a family member set it up for you. Email started working, so everyone moved on. The problem is that “email works” is a very low bar, and the gap between that and a properly configured workspace is where most of the value lives.
The good news is that closing that gap does not require ripping anything out. It is a series of settings and habits, and you can work through them one at a time.
Lock Down How Files and Calendars Are Shared by Default
Here is a setting that quietly causes real problems: what happens when someone creates a new file. In some configurations, every new document is automatically shared with everyone in the company the moment it is created. That is rarely what you want. New files should be private to the person who made them, shared deliberately by clicking share or by dropping them into a shared drive.
Calendars work the same way. By default, calendar events are visible in read-only form to everyone in the business. For a team under 20 people, that is usually a sensible default that helps everyone coordinate. For a larger organisation, you may not want the whole company seeing the detail on the CEO’s or HR manager’s calendar. You can move sensitive roles into a separate organisational unit in the admin panel, or set calendars to show only free or busy without the event details.
The principle behind both settings is the same: sharing should be a decision, not an accident.
Want it done right from day one? Cloud Concierge members get guided setup and unlimited ongoing support for exactly this kind of thing.
Turn On the Features Most Businesses Never Switch On
Some of the most useful parts of Google Workspace are switched off, or simply never discovered. Three are worth setting up today.
Delegated mail lets one person read and respond to another person’s inbox without being able to log in as them or see their Drive files. It is perfect for a personal assistant managing your email, or for covering a teammate’s inbox while they are on leave. You enable it once in the admin panel, then each person can choose who to delegate to.
Cloud Search gives you one search box across everything in your business: email, chat messages, and documents in Drive, no matter where they live. For you and your team, it turns “where did I put that” into a five-second answer.
Version history is the safety net you do not think about until you need it. Because Workspace saves every keystroke to the cloud in near real time, every change to a document is recorded. Click the clock icon in any Google Doc and you can rewind to any earlier version, see who changed what, and restore it. It even works offline, as long as you have switched on offline access in Gmail and Drive.
Get Your Email Foundations Right
This is the one people want to skip, so stick with us, because it protects your money. Just because email is landing in your inbox does not mean it is set up correctly. If your emails sometimes land in customers’ spam folders, or you are receiving messages that should have been blocked, the cause is often your DNS records.
In plain terms, DNS is your domain’s settings, and a few specific records control how your email is trusted. Your MX records get mail flowing in the first place. On top of that, three protocols, SPF, DKIM, and DMARC, prove that an email really came from you. Without them, anyone can pretend to be your business.
That is not a theoretical risk. A common scam is an email impersonating one of your staff, asking for a supplier payment to a bank account that has quietly been changed. If your team sends that money, there is very little anyone can do to recover it. Getting these records right is one of the cheapest forms of business insurance you can buy.
You can run a free check on your domain at itgenius.com/dns to see what needs fixing. If the results look like gibberish, that is exactly the kind of thing our Quick Fix team sorts out quickly, usually the same day.
Break Old Outlook Habits
Even with everything configured, teams often carry old habits across from Outlook or Apple Mail, and those habits hold them back. Google works differently, and a couple of mindset shifts make a big difference.
The biggest one is folders versus labels. People moving from Outlook tend to treat Gmail labels like folders, dragging each email into one place. But labels are really tags, which means a single email can live in several labels at once. Better still, Gmail’s search is so good that you can often stop filing emails altogether. Learn to “search stack” by combining a name, a keyword, and a date, and you can find anything in seconds without folders at all.
The other shift is using the right app for the job. A lot of internal back-and-forth that happens over email would be faster in Google Chat. We set up a space for each part of the business, plus a few fun ones like a team water cooler. When you are collecting information, a Google Form keeps your data clean and uniform far better than typing straight into a spreadsheet, and it works for anyone, even people without a Google account. From there you can connect forms, sheets, and chat together with automations. We covered one approach to that in our guide on email automation in Google Workspace.
Make Security the Default, Not an Afterthought
Security is the area where small businesses carry the most risk and the least visibility, so make it boring and automatic.
Start by enforcing two-step verification for everyone, with a short enrolment window so staff can get set up. Once it is enforced, no one can log in with just a password, which stops the large majority of phishing attempts cold. Even if someone steals a username and password, they cannot get in without the second device.
Next, use group-based permissions rather than sharing files with individual accounts one by one. Individual shares get forgotten and missed when someone leaves, which is exactly how former staff end up with access they should not have. And if you are still using shared folders inside My Drive rather than proper shared drives, switching to shared drives gives you real control: who can upload, who can edit, who can only view, and who can delete.
If this section made you a little uneasy, that is a useful signal. You can book a complimentary basic audit with our team through a free consultation, or step up to a full Google Workspace security audit where we review every setting and give you a formal report.
When to Bring in an IT Partner
You can absolutely work through this list yourself, and we have step-by-step guides on the channel for each piece. But most business owners did not start a company to become their own IT department, and every hour spent wrestling with admin settings is an hour not spent on the business.
That is the whole idea behind a managed IT partner. Instead of hunting through admin panels or waiting until something breaks, you get a team that handles setup, onboarding and offboarding, security, and the day-to-day questions for you. For one-off problems, our Quick Fix service gives you instant support during business hours. For ongoing peace of mind, our Cloud Concierge membership is an all-you-can-eat training, support, advice, and security monitoring service for your Google Workspace and the tools around it.
If you would rather have an expert in your corner than a growing list of settings to fix, that is exactly what we are here for.
Key Takeaways
- “Email works” is a low bar. Most of Google Workspace’s value sits in features and settings the average business never touches, so make sharing a deliberate choice and lock down default file and calendar sharing.
- Switch on the hidden wins: delegated mail, Cloud Search, version history, and offline access.
- Get SPF, DKIM, and DMARC right so no one can impersonate your business and reroute supplier payments.
- Enforce two-step verification and use group-based permissions and shared drives so security is automatic, not optional.
- If managing all of this is pulling you away from running the business, a managed IT partner like Cloud Concierge takes it off your plate.
What This Video Covers
- Why most businesses use only a fraction of Google Workspace, the “Ferrari in the slow lane” problem.
- Delegated mail: letting a PA or a covering teammate manage an inbox without full account access.
- File sharing defaults: stopping new documents from being shared with the whole company automatically.
- Calendar visibility: when company-wide sharing makes sense and how to restrict it for sensitive roles.
- Cloud Search: one search box across email, chat, and Drive that most owners never switch on.
- Getting DNS right (MX, SPF, DKIM, DMARC) so your email is trusted and no one can impersonate your business.
- Breaking old Outlook habits: labels as tags, search stacking, and dropping folders altogether.
- Using the right app for the job: Google Chat over email, Forms over raw spreadsheets, and simple automations.
- Version history and offline access as everyday safety nets.
- Security best practice: enforced two-step verification, group-based permissions, and shared drives.
