MT.1045 - Only invited users should be automatically admitted to Teams meetings

Contributed by Stefan Wey with 2 co-contributorsAll contributors →

Overview

Only invited users should be automatically admitted to Teams meetings.

Users who aren’t invited to a meeting shouldn’t be let in automatically, because it increases the risk of data leaks, inappropriate content being shared, or malicious actors joining. If only invited users are automatically admitted, then users who weren’t invited will be sent to a meeting lobby. The host can then decide whether or not to let them in.

This test checks the AutoAdmittedUsers setting of the Global (Org-wide default) Teams meeting policy.

Remediation action

1. Open Meeting policies in the Teams admin center.
2. Select the Global (Org-wide default) policy.
3. Set Who can bypass the lobby to People who were invited.
4. Select Save.

Or with PowerShell: Set-CsTeamsMeetingPolicy -Identity Global -AutoAdmittedUsers InvitedUsers

Related links

• Manage meeting policies in Microsoft Teams - Microsoft Learn

Test Metadata

Field	Value
Test ID	MT.1045
Severity	Medium
Suite	Maester
Product	Teams
Feature	Meetings
Area	External access and sharing
Resource type	Tenant
User impact	Medium
Implementation cost	Low
MITRE ATT&CK	None
Supports controls	nist-800-53-r5:AC-3
PowerShell test	Test-MtCheckMT1045
Services	Teams

Source

• Test: tests/maester/teams/Test.MT.1045.ps1
• Documentation: tests/maester/teams/Test.MT.1045.md