8.5.5 (L2) Ensure meeting chat does not allow anonymous users

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting controls who has access to read and write chat messages during a meeting.

Ensuring that only authorized individuals can read and write chat messages during a meeting reduces the risk that a malicious user can inadvertently show content that is not appropriate or view sensitive information.

Solution

To remediate using the UI:

- Navigate to Microsoft Teams admin center https://admin.teams.microsoft.com.
- Select Settings & policies > Global (Org-wide default) settings.
- Select Meetings to open the meeting settings section.
- Under meeting engagement set Meeting chat to On for everyone but anonymous users.

To remediate using PowerShell:

- Connect to Teams PowerShell using Connect-MicrosoftTeams.
- Run the following command to set the minimum recommended state:

Set-CsTeamsMeetingPolicy -Identity Global -MeetingChatEnabledType "EnabledExceptAnonymous"

Note: The audit section outlines additional compliant states which are more restrictive than the recommended state.

Impact:

Only authorized individuals will be able to read and write chat messages during a meeting.

See Also

https://workbench.cisecurity.org/benchmarks/22162