CIS.M365.8.5.6 - (L2) Ensure only organizers and co-organizers can present
Overview
The presenter role controls who can share their screen or content in a meeting. If every participant can take over the presenter role, anyone who joins can share content with the whole meeting, including malicious files, links and screens that show confidential information.
Limiting the presenter role to organizers and co-organizers keeps control of shared content with the people who run the meeting. Everyone else joins as an attendee. The policy sets the default for new meetings, and an organizer can still change who can present in the meeting options of a particular meeting.
Remediation action
- Sign in to the Microsoft Teams admin center.
- Go to Meetings > Meeting policies.
- Open the Global (Org-wide default) policy.
- Under Who can present, select Only organizers and co-organizers.
- Select Save.
PowerShell
- Connect to Teams PowerShell using
Connect-MicrosoftTeams. - Run the following command:
Set-CsTeamsMeetingPolicy -Identity Global -DesignatedPresenterRoleMode OrganizerOnlyUserOverride
Related links
- Microsoft Teams admin center
- Manage meeting policies in Microsoft Teams
- Set-CsTeamsMeetingPolicy
- CIS Microsoft 365 Foundations Benchmark v7.0.0 - 8.5.6
Test Metadata
| Field | Value |
|---|---|
| Test ID | CIS.M365.8.5.6 |
| Severity | Low |
| Suite | CIS |
| Product | Teams |
| Feature | Meetings |
| Area | Email and collaboration protection |
| Resource type | Tenant |
| User impact | Medium |
| Implementation cost | Low |
| MITRE ATT&CK | T1566.003 Spearphishing via Service |
| Supports benchmark | CIS Microsoft 365 Foundations Benchmark (version 7.0.0), requirement 8.5.6 |
| Benchmark level | L2 |
| Benchmark profiles | E3 Level 2 |
| Supports controls | cis-m365:8.5.6, nist-800-53-r5:AC-3 |
| PowerShell test | Test-MtCisTeamsPresenterRole |
| Services | Teams |
Source
- Test:
tests/cis/Test.CIS.M365.8.5.6.ps1 - Documentation:
tests/cis/Test.CIS.M365.8.5.6.md