Microsoft 365 tenant · SharePoint, OneDrive & Teams

Make only organizers and co-organizers presenters by default

When it fails: Every Teams meeting participant can present by default. Any participant, including external and anonymous ones, can share their screen or content to the whole meeting without the organizer granting it.

CB-M365-COLLAB-028lowactivemanualprofile hardened

Description

In meetings organized by users of the organization, only the organizer and co-organizers are presenters by default; other participants are attendees until promoted (Who can present = Only organizers and co-organizers, DesignatedPresenterRoleMode = OrganizerOnlyUserOverride). Organizers can change the value in Meeting options.

Rationale

Presenters can share screens, mute and remove participants, admit people from the lobby and start recording. Granting this to everyone by default lets an uninvited or malicious participant broadcast offensive or misleading content, or disrupt the meeting, before the organizer reacts.

Impact

Organizers must promote presenters before or during the meeting, which adds a step for collaborative meetings. Organizers who prefer the old behavior can change it per meeting.

Applies when

Requires: Microsoft Teams

Setting

LocationTeams admin center > Meetings > Meeting policies > Content sharing > Who can present
DefaultEveryone (EveryoneUserOverride)
RecommendedOnly organizers and co-organizers (OrganizerOnlyUserOverride)

Audit

  1. Sign in to the Microsoft Teams admin center (https://admin.teams.microsoft.com) as at least a Global Reader.
  2. Browse to Meetings > Meeting policies and open the Global (Org-wide default) policy, then every custom policy assigned to users.
  3. In the Content sharing section, check that Who can present is Only organizers and co-organizers.
  4. With Microsoft Teams PowerShell (Global Reader is enough): Get-CsTeamsMeetingPolicy | Select-Object Identity, DesignatedPresenterRoleMode.
  5. Fail if any policy returns a value other than OrganizerOnlyUserOverride.

Remediation

  1. In the Teams admin center, browse to Meetings > Meeting policies and open the Global (Org-wide default) policy.
  2. In the Content sharing section, set Who can present to Only organizers and co-organizers and Save. Role: Teams Administrator.
  3. Repeat for each custom policy, unless a documented exception applies to its users.
  4. PowerShell equivalent: Set-CsTeamsMeetingPolicy -Identity Global -DesignatedPresenterRoleMode OrganizerOnlyUserOverride (repeat with -Identity <policy> for custom policies). Changes can take up to 24 hours to apply.

References

Mappings

FrameworkIDRelation
NIST SP 800-53 Rev. 55.1.1AC-3related
NIST SP 800-53 Rev. 55.1.1AC-6related

How this control relates to the other framework's: equivalent, stricter, looser, partial or related.

  • related CB-M365-COLLAB-029 Prevent external participants from giving or requesting control of shared screens

People and lifecycle

Authors
Introduced inv0.1.0
Created, updated2026-10-24, 2026-10-24
Translationsfr