Detections
Analytics

MS.TEAMS.2.2v2 - Unmanaged users SHALL NOT be enabled to initiate contact with internal users.

Information

Allowing contact from unmanaged users can expose users to email and contact address harvesting. This policy provides protection against this type of harvesting.

Solution

1. Sign in to the Microsoft Teams admin center.

2. Select Users > External access.

3. Select Policies.

4. Select Global (Org-wide Default).

5. Under Edit policy details, toggle People in my organization can communicate with unmanaged Teams accounts to one of the following:
 1. To completely block contact with unmanaged users, toggle the setting to Off.
 2. To allow contact with unmanaged users only if the internal user initiates the contact:
 - Toggle the setting to On.
 - Clear the check next to External users with Teams accounts not managed by an organization can contact users in my organization.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|CM-7, 800-53|SI-8

Plugin: microsoft_azure

Control ID: 1e1b8ce2b5d1173847e982c49e9aa1d2612b82689886538ca9fe607236bdf3a9