Detections
Analytics

MS.TEAMS.1.1v1 - External meeting participants SHOULD NOT be enabled to request control of shared desktops or windows.

Information

An external participant with control of a shared screen could potentially perform unauthorized actions on the shared screen. This policy reduces that risk by removing an external participant's ability to request control. However, if an agency has a legitimate use case to grant this control, it may be done on a case-by-case basis.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

To help ensure external participants do not have the ability to request
control of the shared desktop or window in the meeting:

1. Sign in to the Microsoft Teams admin center.

2. Select Meetings > Meeting policies.

3. Select the Global (Org-wide default) policy.

4. Under the Content sharing section, set External
 participants can give or request control to Off.

5. If custom policies were created, repeat these steps for each
 policy, selecting the appropriate policy in step 3.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-17a.

Plugin: microsoft_azure

Control ID: 6ccfc0f185825efe21088fc0fdf40a39b19007a834b75024157301f2ac9dc2ed