Detections
Analytics

8.5.6 Ensure only organizers and co-organizers can present

Information

This policy setting controls who can present in a Teams meeting.

Note: Organizers and co-organizers can change this setting when the meeting is set up.

Ensuring that only authorized individuals are able to present reduces the risk that a malicious user can inadvertently show content that is not appropriate.

Solution

To remediate using the UI:

 - Navigate to Microsoft Teams admin center https://admin.teams.microsoft.com.
 - Click Settings & policies and select the Global (Org-wide default) settings tab.
 - Select Meetings to open the meeting settings section.
 - Under content sharing set Who can present to Only organizers and co-organizers.

To remediate using PowerShell:

 - Connect to Teams PowerShell using Connect-MicrosoftTeams.
 - Run the following command to set the recommended state:

Set-CsTeamsMeetingPolicy -Identity Global -DesignatedPresenterRoleMode "OrganizerOnlyUserOverride"

Impact:

Only organizers and co-organizers will be able to present without being granted permission.

See Also

https://workbench.cisecurity.org/benchmarks/24620

Item Details

Category: ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

References: 800-53|AC-2, 800-53|AC-3, 800-53|AC-6, 800-53|AC-6(1), 800-53|AC-6(7), 800-53|AU-9(4)

Plugin: microsoft_azure

Control ID: e2fe6d45253c845d0a6aa536e80875bece3a29889912ab70fad174be6bfac835