MT.1045: Only invited users should be automatically admitted to Teams meetings
| ID | MT.1045 |
| Severity | Medium |
| Suite | Mito |
| Product | Teams |
| Feature | Meetings |
| Security area | External access and sharing |
| Resource type | Tenant |
| User impact of fixing | Medium |
| Effort to fix | Low |
| Framework controls | nist-800-53-r5:AC-3 Access Enforcement |
| Reads from | Microsoft Teams |
What this checks and how to fix it
Section titled “What this checks and how to fix it”Only invited users should be automatically admitted to Teams meetings.
Users who aren’t invited to a meeting shouldn’t be let in automatically, because it increases the risk of data leaks, inappropriate content being shared, or malicious actors joining. If only invited users are automatically admitted, then users who weren’t invited will be sent to a meeting lobby. The host can then decide whether or not to let them in.
This test checks the AutoAdmittedUsers setting of the Global (Org-wide default) Teams meeting policy.
Remediation action
Section titled “Remediation action”- Open Meeting policies in the Teams admin center.
- Select the Global (Org-wide default) policy.
- Set Who can bypass the lobby to People who were invited.
- Select Save.
Or with PowerShell: Set-CsTeamsMeetingPolicy -Identity Global -AutoAdmittedUsers InvitedUsers
Related links
Section titled “Related links”Mito check. Author: weyCC81; contributors: merill, svrooij. Open-source licences.
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.