How to Lock Down Microsoft Teams Meeting Policies and Lobby Settings
Retrospective: this article looks back at events from April 2020, written in 2026 with the benefit of hindsight.
Microsoft Teams meeting policies decide who can join, present and record. Here is how to tighten them without making meetings painful.
Step 1: Review tenant-wide meeting policies
In the Teams admin center under Meetings → Meeting policies, review the Global (Org-wide default) policy:
- Who can bypass the lobby: a common choice is "People in my org and guests" or "People in my org" — not "Everyone."
- Anonymous users can join a meeting: disable if you rarely host external anonymous participants, or restrict through organizer policies.
- Who can present: "People in my org and guests" or "Only organizers and co-organizers" for sensitive groups.
- Dial-in users can bypass the lobby: off.
Step 2: Create stricter policies for sensitive groups
Assign a stricter policy to executives, HR, legal and finance, for example disabling anonymous join and limiting presenters.
Step 3: Use meeting templates and sensitivity labels
With Teams Premium, use custom meeting templates and sensitivity labels for meetings to apply settings automatically for confidential meetings — lobby rules, watermarking, recording restrictions and end-to-end encryption options.
Step 4: Control external access
In External access, decide whether users can meet and chat with any external organization, or only allowed domains. Review guest access settings separately.
Step 5: Recording and transcription
Decide who can record, where recordings are stored, and how long they're retained. Apply retention policies to recordings.
Step 6: Train organizers
Give organizers a one-page guide: use the lobby, set presenters, don't post links publicly, remove unwanted participants.
Verify
Test a meeting as an external anonymous user to confirm the experience matches your policy.
- Zoom-Bombing (Apr 2020): What It Taught Us About Teams Meeting Security Incident Teardowns
- Detecting Meeting Hijacking: Defender XDR and Sentinel Hunting Queries Detection & Response
- CIO Brief: Collaboration Tools Are Now Critical Infrastructure CIO Briefings