Microsoft Teams – Security

Microsoft Teams – Security

Microsoft Teams, as part of the Microsoft 365 (M365) service, follows all the security best practices and procedures​ as seen in the Microsoft Trust Center​. Though teams is designed and developed in compliance with the Microsoft security standard, users can further configure their “M​eeting options” to make a teams meeting more secure.​​​​

 

1. Configure "Who can bypass the lobby?"

Recommended setting is “​​People in my organization”.

By default, people outside your organization need to wait at the lobby.

Remarks: Under the CUHK setting, all staff belong to one organization (called staff tenant) while all students belong to another organization (called student tenant). That means, if the teams meeting is held in staff tenant, all students will be regarded as external users. By default, they need to wait at the lobby.

People in my organization​
​Staff tenant​​ Staff, project accounts, etc​
Student tenant ​​​​​​​Students, Alumni, project accounts, etc

Meeting organizer can change the configuration according to your need. The available options are:

Who can bypass the lobby? What happens Recommended when…
People in my organization Only people in your org, including colleagues and guests who have different email domains than you do, can get into your meetings directly. You want all external guests to wait in the lobby so you can approve them one by one.
People in my organization and trusted organizations Only people in your Teams org and external guests from trusted organizations can get into your meetings directly. You want some external guests to wait in the lobby so you can approve them one by one.
Everyone Anyone who has access to the meeting link gets into the meeting directly, including people who call in. You don’t want anyone to wait in the lobby. You want everyone to be able to join your meetings without specific approval.​

Details: https://support.microsoft.com/en-us/office/change-participant-settings-for-a-teams-meeting-53261366-dbd5-45f9-aae9-a70e6354f88e

2. Configure "Who can present?"​​

Recommended setting is “Only me”.

By default, everyone can share screen and everyone (except external users) can​ do recording etc. Organizer can configure meeting options such that only organizer (and presenters assigned by organizer) can share screen and do recording. Below is a list of what organizer/presenter/attendee can do:

Capability Organizer Presenter Attendee
Speak and share video
Participate in meeting chat
Share content
Privately view a PowerPoint file shared by someone else
Take control of someone else’s PowerPoint presentation
Mute other participants
Remove participants
Admit people from the lobby
Change the roles of other participants
Start or stop recording
Download participants’ list  

The available options are:

Who can present? What happens
Everyone Anyone who has access to the meeting link will join the meeting as a presenter.
People in my organization Only people in your org will be presenters. External participants will join as attendees.
Specific people Only people you choose from the list of invitees will be presenters. Everyone else will join as attendees.
Only me Only the organizer will be a presenter. All other participants will join as attendees.

Details: https://support.microsoft.com/en-us/office/roles-in-a-teams-meeting-c16fa7d0-1666-4dde-8686-0a0bfe16e019

 

3. General advice for using online meeting products.
  1. ​Share your meeting link only to the intended attendees​. Do not post your meeting link in social media/ public webpages.
  2. Setup two-factor authentication for your account
  3. Do not share sensitive information in online meetings
  4. Use up-to-date Teams app
  5. Cover the webcam when it’s not in use
  6. Do not open any malicious links
  7. Ensure your devices comply with Guidelines For Securely Configuring your Computers.
4. Where to find "Meeting Options"?

(a) After you’ve sent out the meeting invitation, you can click the “Calendar” icon and click your meeting.

Then you can find the “Meeting options”.

(b) You can also find the “Meeting options” link in your meeting invitation.

You can configure your meeting options in this page:

During the meeting, you can still configure the meeting options. For “Who can present?”, you can also use the following button in the Participants list.

Click here for more about Teams Security Guide from Microsoft.