Only organizers and co-organizers can present

​

What this check verifies

Teams meeting policy sets the default Who can present to only organizers and co-organizers in the org-wide policy. This evaluates whether attendees are limited to the attendee role by default rather than joining as presenters.

​

Risk

Allowing everyone to present enables unsolicited screen sharing and content uploads, causing data exposure (confidentiality), misleading or altered information during sessions (integrity), and meeting takeovers or disruptions (availability). External participants can exploit this to distribute phishing links or malware.

​

Recommendation

Set Who can present to Only organizers and co-organizers by default. Apply least privilege:

• Grant presenter rights only to designated users per meeting
• Keep others as attendees, especially externals
• Use lobby/guest controls to limit elevation

Adopt defense in depth with monitoring and clear host procedures.

​

Remediation

​

References

• https://learn.microsoft.com/en-us/microsoftteams/meeting-who-present-request-control

​

Where this check fires

This check runs on every scheduled scan against your Microsoft 365 account. Findings appear at Cloud Security → Findings filterable by Check ID = teams_meeting_presenters_restricted. To re-evaluate after a fix, hit Run now on the account’s schedule under Cloud Security → Schedules — the next scan re-checks this control and marks the finding fixed or keeps it persistent.

---

← Back to Microsoft 365 checks