Meetings policy blocks anonymous users in meeting chat

​

What this check verifies

Microsoft 365 Teams meeting policies restrict chat so anonymous participants cannot send or read messages. Accepted configurations include EnabledExceptAnonymous or EnabledInMeetingOnlyForAllExceptAnonymous.

​

Risk

Anonymous chat enables unverified users to leak sensitive content, post phishing/malware links, and impersonate others. This undermines confidentiality and accountability, and can disrupt meetings through spam, affecting availability and auditability.

​

Recommendation

Enforce chat for authenticated users only following least privilege.

• Block chat for anonymous users
• Use guest access with identity verification and lobby controls
• Apply DLP and link/file protection to chat
• Monitor audit logs and set retention to ensure traceability

​

Remediation

​

References

• https://learn.microsoft.com/en-us/powershell/module/teams/set-csteamsmeetingpolicy?view=teams-ps

​

Where this check fires

This check runs on every scheduled scan against your Microsoft 365 account. Findings appear at Cloud Security → Findings filterable by Check ID = teams_meeting_chat_anonymous_users_disabled. To re-evaluate after a fix, hit Run now on the account’s schedule under Cloud Security → Schedules — the next scan re-checks this control and marks the finding fixed or keeps it persistent.

---

← Back to Microsoft 365 checks