(L2) Ensure only organizers and co-organizers can present

Contributed by jeremy finneyAll contributors →

Part of CIS · Teams · Meetings · All checks

Run this check

Invoke-Maester -TestId CIS.M365.8.5.6

Overview

The presenter role controls who can share their screen or content in a meeting. If every participant can take over the presenter role, anyone who joins can share content with the whole meeting, including malicious files, links and screens that show confidential information.

Limiting the presenter role to organizers and co-organizers keeps control of shared content with the people who run the meeting. Everyone else joins as an attendee. The policy sets the default for new meetings, and an organizer can still change who can present in the meeting options of a particular meeting.

Remediation action

1. Sign in to the Microsoft Teams admin center.
2. Go to Meetings > Meeting policies.
3. Open the Global (Org-wide default) policy.
4. Under Who can present, select Only organizers and co-organizers.
5. Select Save.

PowerShell

1. Connect to Teams PowerShell using Connect-MicrosoftTeams.
2. Run the following command:

Set-CsTeamsMeetingPolicy -Identity Global -DesignatedPresenterRoleMode OrganizerOnlyUserOverride

Related links

• Microsoft Teams admin center
• Manage meeting policies in Microsoft Teams
• Set-CsTeamsMeetingPolicy
• CIS Microsoft 365 Foundations Benchmark v7.0.0 - 8.5.6

Details

Every attribute of this check

Field	Value
Test ID	CIS.M365.8.5.6
Severity	Low
Suite	CIS
Product	Teams
Feature	Meetings
Area	Email and collaboration protection
Resource type	Tenant
User impact	Medium
Implementation cost	Low
MITRE ATT&CK	T1566.003 Spearphishing via Service
Supports benchmark	CIS Microsoft 365 Foundations Benchmark (version 7.0.0), requirement 8.5.6
Benchmark level	L2
Benchmark profiles	E3 Level 2
Supports controls	cis-m365:8.5.6, nist-800-53-r5:AC-3
PowerShell test	Test-MtCisTeamsPresenterRole
Services	Teams

Source

• Test: tests/cis/Test.CIS.M365.8.5.6.ps1
• Documentation: tests/cis/Test.CIS.M365.8.5.6.md