Detections
Analytics
8.5.3 Ensure only people in my org can bypass the lobby
Information
This policy setting controls who can join a meeting directly and who must wait in the lobby until they're admitted by an organizer, co-organizer, or presenter of the meeting.The recommended state is People who were invited, People in my org or Only organizers and co-organizers.
For meetings that could contain sensitive information, it is best to allow the meeting organizer to vet anyone not directly sent an invite before admitting them to the meeting. This will also prevent the anonymous user from using the meeting link to have meetings at unscheduled times.
Solution
To remediate using the UI:- Navigate to Microsoft Teams admin center https://admin.teams.microsoft.com.
- Click Settings & policies and select the Global (Org-wide default) settings tab.
- Select Meetings to open the meeting settings section.
- Under meeting join & lobby set Who can bypass the lobby to one of the following:
- People who were invited
- People in my org
- Only organizers and co-organizers
To remediate using PowerShell:
- Connect to Teams PowerShell using Connect-MicrosoftTeams.
- Run one of the following PowerShell commands depending on the desired compliant state:
To set to People who were invited :
Set-CsTeamsMeetingPolicy -Identity Global -AutoAdmittedUsers "InvitedUsers"
To set to People in my org :
Set-CsTeamsMeetingPolicy -Identity Global -AutoAdmittedUsers "EveryoneInCompanyExcludingGuests"
To set to Only organizers and co-organizers :
Set-CsTeamsMeetingPolicy -Identity Global -AutoAdmittedUsers "OrganizerOnly"
Impact:
Individuals who are not part of the organization will have to wait in the lobby until they're admitted by an organizer, co-organizer, or presenter of the meeting.
Any individual who dials into the meeting regardless of status will also have to wait in the lobby. This includes internal users who are considered unauthenticated when dialing in.
See Also
Item Details
Audit Name: CIS Microsoft 365 Foundations v7.0.0 L1 E3
Category: ACCESS CONTROL, AUDIT AND ACCOUNTABILITY
References: 800-53|AC-2, 800-53|AC-3, 800-53|AC-6, 800-53|AC-6(1), 800-53|AC-6(7), 800-53|AU-9(4)
Plugin: microsoft_azure
Control ID: c0f09e7a3f609d1efb0008e2a088eff4c7de11f5fd2183185162a6af1caea051