Check ID:
Provider: Microsoft 365
Service:
Severity: CRITICAL
Categories:
Resource type:
teams_meeting_anonymous_user_join_disabledProvider: Microsoft 365
Service:
teamsSeverity: CRITICAL
Categories:
identity-access, e3Resource type:
NotDefinedWhat this check verifies
Microsoft 365 Teams org-wide meeting policy is evaluated to ensure anonymous meeting join is disabled, preventing non-authenticated participants from joining.Risk
Anonymous meeting access allows unaccountable attendees to join, eavesdrop, capture shared content, and impersonate others. This undermines confidentiality and integrity, and threatens availability via meeting hijacking, spam, and disruption.Recommendation
Disable anonymous meeting join tenant-wide and require authenticated users or managed guests. Use lobby admission for externals, limit presenter rights per least privilege, and enforce conditional access or registration to control who enters.Remediation
- CLI
- Dashboard steps
Set-CsTeamsMeetingPolicy -Identity Global -AllowAnonymousUsersToJoinMeeting $false
References
Where this check fires
This check runs on every scheduled scan against your Microsoft 365 account. Findings appear at Cloud Security → Findings filterable byCheck ID = teams_meeting_anonymous_user_join_disabled. To re-evaluate after a fix, hit Run now on the account’s schedule under Cloud Security → Schedules — the next scan re-checks this control and marks the finding fixed or keeps it persistent.
← Back to Microsoft 365 checks