TEAMS.TC.5008 - Anonymous users should not dial out
Anonymous users should not be allowed to dial out
Description
This test checks if anonymous users are restricted from dialing out from Microsoft Teams meetings.
Policy Statement
Contoso's company policy requires that anonymous users should not be allowed to dial out from meetings to prevent toll fraud and unauthorized PSTN usage. Allowing anonymous dial-out creates potential for abuse and unexpected communication charges.
Why This Matters
Security and Financial Risks:
When anonymous dial-out is enabled:
- Potential for toll fraud and unauthorized charges
- Risk of PSTN resource abuse
- Difficulty tracking call accountability
- Unexpected communication costs
- Potential for international calling abuse
Anonymous dial-out can lead to toll fraud where unauthorized users make expensive phone calls at your organization's expense, potentially resulting in thousands of dollars in fraudulent charges.
This setting may not be available in all licensing tiers or tenant configurations. The test will be skipped if the property is not available in your tenant.
How to fix
Disable Anonymous Dial Out in Teams Admin Center
- Navigate to the Teams admin center - Meeting policies
- Select the Global (Org-wide default) policy
- Under Participants & guests, locate Let anonymous people dial out to phone numbers
- Set this option to Off
- Click Save
Verify via PowerShell
# Connect to Teams
Connect-MicrosoftTeams
# Check if the property exists and current setting
$policy = Get-CsTeamsMeetingPolicy -Identity Global
if ($policy.PSObject.Properties['AllowAnonymousUsersToDialOut']) {
$policy | Select-Object AllowAnonymousUsersToDialOut
} else {
Write-Host "AllowAnonymousUsersToDialOut property not available in this tenant"
}
# Disable anonymous dial out (if property exists)
Set-CsTeamsMeetingPolicy -Identity Global -AllowAnonymousUsersToDialOut $false
# Verify the change
Get-CsTeamsMeetingPolicy -Identity Global | Select-Object AllowAnonymousUsersToDialOut
Impact
Disabling anonymous dial out will:
- ✅ Prevent toll fraud from anonymous users
- ✅ Reduce unauthorized PSTN charges
- ✅ Improve accountability for dial-out usage
- ⚠️ Anonymous users cannot dial phone numbers from meetings
Only authenticated users will be able to dial out to phone numbers from Teams meetings, ensuring accountability and reducing fraud risk.