rules/findings/m365/microsoft_teams/meetings/ms-teams-users-dialing-in-cant-bypass-lobby.json
|
{
"args": [ ], "provider": "Microsoft365", "serviceType": "Microsoft Teams", "serviceName": "Microsoft 365", "displayName": "Ensure users dialing in can\u0027t bypass the lobby", "description": "This policy setting controls if users who dial in by phone can join the meeting directly or must wait in the lobby. Admittance to the meeting from the lobby is authorized by the meeting organizer, co-organizer, or presenter of the meeting.", "rationale": "For meetings that could contain sensitive information, it is best to allow the meeting organizer to vet anyone not directly from the organization.", "impact": "Individuals who are dialing in to the meeting must wait in the lobby until a meeting organizer, co-organizer, or presenter admits them.", "remediation": { "text": "\r\n\t\t\t###### To remediate using the UI: \r\n\t\t\t1. Navigate to Microsoft Teams admin center https://admin.teams.microsoft.com. \r\n\t\t\t2. Click to expand Meetings select Meeting policies. \r\n\t\t\t3. Click Global (Org-wide default). \r\n\t\t\t4. Under meeting join \u0026 lobby set People dialing in can bypass the lobby to Off. \r\n\t", "code": { "powerShell": null, "iac": null, "terraform": null, "other": null } }, "recommendation": null, "references": [ "https://learn.microsoft.com/en-US/microsoftteams/who-can-bypass-meeting-lobby?WT.mc_id=TeamsAdminCenterCSH#choose-who-can-bypass-the-lobby-in-meetings-hosted-by-your-organization", "https://learn.microsoft.com/en-us/powershell/module/skype/set-csteamsmeetingpolicy?view=skype-ps" ], "compliance": [ { "name": "CIS Microsoft 365 Foundations Benchmark", "version": "7.0.0", "reference": "8.5.4", "profile": [ "E3 Level 1", "E5 Level 1" ] } ], "level": "medium", "tags": [ ], "rule": { "path": "o365_teams_skype_meeting_policies", "subPath": null, "selectCondition": { }, "query": [ { "filter": [ { "conditions": [ [ "Identity", "eq", "Global" ], [ "AllowPSTNUsersToBypassLobby", "ne", "false" ] ], "operator": "and" } ] } ], "shouldExist": null, "returnObject": null, "removeIfNotExists": null }, "output": { "html": { "data": { "properties": { "Identity": "Identity", "Description": "Description", "AllowPSTNUsersToBypassLobby": "Allow PSTN Users To Bypass Lobby" }, "expandObject": null }, "table": "default", "decorate": [ { "itemName": "Allow PSTN Users To Bypass Lobby", "itemValue": "enabled", "className": "badge badge-danger badge-xl" } ], "emphasis": [ ], "actions": { "objectData": { "properties": [ "*" ], "expandObject": null, "limit": null }, "showGoToButton": "True", "showModalButton": "True", "directLink": null } }, "text": { "data": { "properties": { }, "expandObject": null }, "status": { "keyName": [ ], "message": "Ensure users dialing in can\u0027t bypass the lobby", "defaultMessage": null }, "properties": { "resourceName": "Description", "resourceId": "ConfigId", "resourceType": "TeamsMeetingPolicy" }, "onlyStatus": false } }, "idSuffix": "teams_users_dialing_bypass_lobby_not_configured", "notes": [ ], "categories": [ ], "immutable_properties": [ "Description", "ConfigId", "Key.SchemaId.XName.name" ], "id": "microsoft365_2178" } |