Description
Meeting chat is on for everyone except anonymous participants (MeetingChatEnabledType =
EnabledExceptAnonymous), or off (Disabled), in every meeting policy. Anonymous participants who
are admitted cannot read or post chat messages.
Rationale
Meeting chat often carries documents, links and decisions that outlive the meeting. An anonymous participant has no accountable identity and can use the chat to post phishing links that look like part of the meeting. Removing chat for anonymous participants limits both exposure and abuse while keeping audio, video and screen sharing.
Impact
Anonymous participants (for example customers without an account) cannot use the chat, including to ask questions; use Q&A or invite them as guests. None known for authenticated participants.
Applies when
Requires: Microsoft Teams
Setting
| Location | Teams admin center > Meetings > Meeting policies > Meeting engagement > Meeting chat |
| Default | On for everyone (Enabled) |
| Recommended | On for everyone but anonymous users (EnabledExceptAnonymous), or Off |
Audit
- Sign in to the Microsoft Teams admin center (https://admin.teams.microsoft.com) as at least a Global Reader.
- Browse to Meetings > Meeting policies and open the Global (Org-wide default) policy, then every custom policy assigned to users.
- In the Meeting engagement section, check that Meeting chat is On for everyone but anonymous users or Off.
- With Microsoft Teams PowerShell (Global Reader is enough):
Get-CsTeamsMeetingPolicy | Select-Object Identity, MeetingChatEnabledType. - Fail if any policy returns
Enabled.
Remediation
- In the Teams admin center, browse to Meetings > Meeting policies and open the Global (Org-wide default) policy.
- In the Meeting engagement section, set Meeting chat to On for everyone but anonymous users and Save. Role: Teams Administrator.
- Repeat for each custom policy, unless a documented exception applies to its users.
- PowerShell equivalent:
Set-CsTeamsMeetingPolicy -Identity Global -MeetingChatEnabledType EnabledExceptAnonymous(repeat with-Identity <policy>for custom policies). Changes can take up to 24 hours to apply.
References
- Set-CsTeamsMeetingPolicy Microsoft, vendor-doc, accessed 2026-10-24
- Teams settings and policies reference Microsoft, vendor-doc, accessed 2026-10-24
Mappings
| Framework | ID | Relation |
|---|---|---|
| NIST SP 800-53 Rev. 55.1.1 | AC-14 | related |
| NIST SP 800-53 Rev. 55.1.1 | AC-3 | related |
How this control relates to the other framework's: equivalent, stricter, looser, partial or related.
Threats mitigated
| Taxonomy | ID |
|---|---|
| MITRE ATT&CK | T1566.002 |
Related controls
- related
CB-M365-COLLAB-023Prevent anonymous participants from joining Teams meetings - related
CB-M365-COLLAB-030Block chat in external meetings hosted by untrusted organizations
People and lifecycle
| Authors |
|
| Introduced in | v0.1.0 |
| Created, updated | 2026-10-24, 2026-10-24 |
| Translations | fr |