Meetings policy blocks external participants from control

​

What this check verifies

Microsoft 365 Teams meeting policies govern whether external participants can give, be given, or request control during screen sharing via allowExternalParticipantGiveRequestControl. Evaluation targets the org-wide default policy to confirm external control actions are blocked.

​

Risk

External control during sharing enables remote input on the presenter’s device, impacting:

• Confidentiality: viewing/copying sensitive data
• Integrity: unauthorized changes, keystroke injection, malware launch
• Availability: session disruption or app termination

​

Recommendation

Apply least privilege: disable external give/request control by setting allowExternalParticipantGiveRequestControl=false in the org-wide policy. If business-justified, restrict presenters to trusted users, limit sharing to SingleApplication, use lobby/presenter roles, and monitor for misuse.

​

Remediation

​

References

• https://learn.microsoft.com/en-us/powershell/module/microsoftteams/set-csteamsmeetingpolicy?view=teams-ps
• https://learn.microsoft.com/en-us/microsoftteams/meeting-who-present-request-control
• https://learn.microsoft.com/en-us/powershell/module/teams/set-csteamsmeetingpolicy?view=teams-ps

​

Where this check fires

This check runs on every scheduled scan against your Microsoft 365 account. Findings appear at Cloud Security → Findings filterable by Check ID = teams_meeting_external_control_disabled. To re-evaluate after a fix, hit Run now on the account’s schedule under Cloud Security → Schedules — the next scan re-checks this control and marks the finding fixed or keeps it persistent.

---

← Back to Microsoft 365 checks