Detections
Analytics

MS.TEAMS.1.2v2 - Anonymous users SHALL NOT be enabled to start meetings.

Information

This policy protects against anonymous users starting Microsoft Teams meetings to scrape internal contacts. The policy is beneficial for agencies that have implemented custom policies, providing flexibility for some users to automatically admit "everyone" to a Microsoft Teams meeting.

Solution

To configure settings for anonymous users:

1. Sign in to the Microsoft Teams admin center.

2. Select Meetings > Meeting policies.

3. Select the Global (Org-wide default) policy.

4. Under the Meeting join & lobby section, ensure the Anonymous users and dial-in callers can start a meeting setting remains at the default position of Off.

5. If custom policies were created, repeat these steps for each policy, selecting the appropriate policy in step 3.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-15a.

Plugin: microsoft_azure

Control ID: 9cf06c9a0d0b77abc40822868abc3cca19d7af3ee2820243deda452ee8ea3187