Microsoft 365How-To & HardeningRetrospectives

How to Lock Down Microsoft Teams Meeting Policies and Lobby Settings

By OnCloudSec Research Team · Published Oct 6, 2026 · 1 min read

Retrospective: this article looks back at events from April 2020, written in 2026 with the benefit of hindsight.

Microsoft Teams meeting policies decide who can join, present and record. Here is how to tighten them without making meetings painful.

Step 1: Review tenant-wide meeting policies

In the Teams admin center under Meetings → Meeting policies, review the Global (Org-wide default) policy:

  • Who can bypass the lobby: a common choice is "People in my org and guests" or "People in my org" — not "Everyone."
  • Anonymous users can join a meeting: disable if you rarely host external anonymous participants, or restrict through organizer policies.
  • Who can present: "People in my org and guests" or "Only organizers and co-organizers" for sensitive groups.
  • Dial-in users can bypass the lobby: off.

Step 2: Create stricter policies for sensitive groups

Assign a stricter policy to executives, HR, legal and finance, for example disabling anonymous join and limiting presenters.

Step 3: Use meeting templates and sensitivity labels

With Teams Premium, use custom meeting templates and sensitivity labels for meetings to apply settings automatically for confidential meetings — lobby rules, watermarking, recording restrictions and end-to-end encryption options.

Step 4: Control external access

In External access, decide whether users can meet and chat with any external organization, or only allowed domains. Review guest access settings separately.

Step 5: Recording and transcription

Decide who can record, where recordings are stored, and how long they're retained. Apply retention policies to recordings.

Step 6: Train organizers

Give organizers a one-page guide: use the lobby, set presenters, don't post links publicly, remove unwanted participants.

Verify

Test a meeting as an external anonymous user to confirm the experience matches your policy.

teams meeting security settingsZoom-bombing / meeting security2020

More on this story