Google Message Security for Google Apps Administration Guide - Manual (Page 33)

Organization Hierarchy & Design 33
Support address / time zone
Default User assignment
The Default User applied to new users
Industry Heuristics
Message Center subject links
Outbound virus blocking
Compliance footer
User Access (to Message Center)
It’s strongly recommended that you change
specific permissions only at the org-level
Daily message limit
Virus notification interval
Allowed and blocked sender lists
Virus blocking On/Off
(should always be On)
Spam filtering On/Off
Spam filter levels
Notification address
(if other than the user's primary address)
Approved recipients/mailing lists
For allowing messages sent to mailing lists
Where Settings Can and Should be Made
x = Typically avoid changing settings at this level