Description
In meetings organized by users of the organization, only the organizer and co-organizers are
presenters by default; other participants are attendees until promoted (Who can present = Only
organizers and co-organizers, DesignatedPresenterRoleMode = OrganizerOnlyUserOverride).
Organizers can change the value in Meeting options.
Rationale
Presenters can share screens, mute and remove participants, admit people from the lobby and start recording. Granting this to everyone by default lets an uninvited or malicious participant broadcast offensive or misleading content, or disrupt the meeting, before the organizer reacts.
Impact
Organizers must promote presenters before or during the meeting, which adds a step for collaborative meetings. Organizers who prefer the old behavior can change it per meeting.
Applies when
Requires: Microsoft Teams
Setting
| Location | Teams admin center > Meetings > Meeting policies > Content sharing > Who can present |
| Default | Everyone (EveryoneUserOverride) |
| Recommended | Only organizers and co-organizers (OrganizerOnlyUserOverride) |
Audit
- Sign in to the Microsoft Teams admin center (https://admin.teams.microsoft.com) as at least a Global Reader.
- Browse to Meetings > Meeting policies and open the Global (Org-wide default) policy, then every custom policy assigned to users.
- In the Content sharing section, check that Who can present is Only organizers and co-organizers.
- With Microsoft Teams PowerShell (Global Reader is enough):
Get-CsTeamsMeetingPolicy | Select-Object Identity, DesignatedPresenterRoleMode. - Fail if any policy returns a value other than
OrganizerOnlyUserOverride.
Remediation
- In the Teams admin center, browse to Meetings > Meeting policies and open the Global (Org-wide default) policy.
- In the Content sharing section, set Who can present to Only organizers and co-organizers and Save. Role: Teams Administrator.
- Repeat for each custom policy, unless a documented exception applies to its users.
- PowerShell equivalent:
Set-CsTeamsMeetingPolicy -Identity Global -DesignatedPresenterRoleMode OrganizerOnlyUserOverride(repeat with-Identity <policy>for custom policies). Changes can take up to 24 hours to apply.
References
- Manage who can present and request control in Teams meetings Microsoft, vendor-doc, accessed 2026-10-24
- Set-CsTeamsMeetingPolicy Microsoft, vendor-doc, accessed 2026-10-24
Mappings
| Framework | ID | Relation |
|---|---|---|
| NIST SP 800-53 Rev. 55.1.1 | AC-3 | related |
| NIST SP 800-53 Rev. 55.1.1 | AC-6 | related |
How this control relates to the other framework's: equivalent, stricter, looser, partial or related.
Related controls
- related
CB-M365-COLLAB-029Prevent external participants from giving or requesting control of shared screens
People and lifecycle
| Authors |
|
| Introduced in | v0.1.0 |
| Created, updated | 2026-10-24, 2026-10-24 |
| Translations | fr |