Skip to main content

TEAMS.TC.5006 - Anonymous users should not join meetings

Anonymous users should not be allowed to join meetings​

Description​

This test checks if anonymous users are restricted from joining Microsoft Teams meetings.

Policy Statement​

Contoso's company policy requires that anonymous users should not be allowed to join meetings to reduce exposure to uninvited attendees and potential security threats. Organizations should use lobby controls and proper meeting authentication instead.

Why This Matters​

Security Concerns:

When anonymous join is enabled:

  • Anyone with the meeting link can join without authentication
  • No identity verification is performed
  • Tracking and auditing of participants becomes difficult
  • Risk of meeting disruption and data exposure increases
  • Potential for unauthorized recording or information gathering
Security Risk

Allowing anonymous join exposes your meetings to anyone with the meeting link, including potential bad actors who could disrupt meetings or gather sensitive information.

How to fix​

Disable Anonymous Join in Teams Admin Center​

  1. Navigate to the Teams admin center - Meeting policies
  2. Select the Global (Org-wide default) policy
  3. Under Participants & guests, locate Let anonymous people join a meeting
  4. Set this option to Off
  5. Click Save

Alternative: Configure Lobby Controls​

If your organization requires external meeting access, configure proper lobby controls instead:

  1. In the same Global meeting policy
  2. Set Automatically admit people to:
    • People in my organization (recommended) - Only internal users bypass lobby
    • Organizer only - All participants wait in lobby for admission
  3. Ensure Always let callers bypass the lobby is set to Off
  4. Click Save

Verify via PowerShell​

# Connect to Teams
Connect-MicrosoftTeams

# Check current anonymous join setting
Get-CsTeamsMeetingPolicy -Identity Global | Select-Object AllowAnonymousUsersToJoinMeeting

# Disable anonymous join
Set-CsTeamsMeetingPolicy -Identity Global -AllowAnonymousUsersToJoinMeeting $false

# Verify the change
Get-CsTeamsMeetingPolicy -Identity Global | Select-Object AllowAnonymousUsersToJoinMeeting

Impact​

Disabling anonymous join will:

  • ✅ Require authentication for all meeting participants
  • ✅ Improve meeting participant tracking and auditing
  • ✅ Reduce risk of meeting disruption
  • ⚠️ External guests must sign in or wait in lobby for admission
Best Practice

For meetings with external participants, use lobby controls to screen attendees before admission rather than allowing anonymous join.