Teams: Disable Meeting Chat For Anonymous Users

<# .SYNOPSIS Meeting Chat No Anonymous .DESCRIPTION Restricts meeting chat to prevent anonymous users from participating .NOTES NL Baseline v2.0 #> #Requires -Version 5.1 #Requires -Modules MicrosoftTeams [CmdletBinding()] param([switch]$Monitoring) $ErrorActionPreference = 'Stop' Write-Host "`n========================================" -ForegroundColor Cyan Write-Host "Meeting Chat No Anonymous" -ForegroundColor Cyan Write-Host "========================================`n" -ForegroundColor Cyan function Invoke-Monitoring { try { Connect-MicrosoftTeams -ErrorAction Stop $policy = Get-CsTeamsMeetingPolicy -Identity Global $result = @{ isCompliant = ($policy.AllowMeetingChat -ne 'Enabled') chatSetting = $policy.AllowMeetingChat } Write-Host " Meeting Chat: $($policy.AllowMeetingChat)" -ForegroundColor $( if ($policy.AllowMeetingChat -eq 'EnabledExceptAnonymous') { 'Green' } elseif ($policy.AllowMeetingChat -eq 'Disabled') { 'Green' } else { 'Red' } ) Write-Host "`n Chat Options:" -ForegroundColor Cyan Write-Host " • Disabled: No meeting chat" -ForegroundColor Green Write-Host " • EnabledExceptAnonymous: Chat for authenticated users only" -ForegroundColor Green Write-Host " • Enabled: Chat for everyone including anonymous" -ForegroundColor Red Write-Host "`n Security Benefits:" -ForegroundColor Cyan Write-Host " • Prevents anonymous chat participation" -ForegroundColor Gray Write-Host " • Reduces security risks" -ForegroundColor Gray Write-Host " • Maintains meeting security" -ForegroundColor Gray Write-Host "`n Recommended: EnabledExceptAnonymous" -ForegroundColor Gray if ($result.isCompliant) { Write-Host "`n[OK] COMPLIANT - Anonymous chat blocked" -ForegroundColor Green exit 0 } else { Write-Host "`n[FAIL] NON-COMPLIANT - Anonymous chat allowed!" -ForegroundColor Red exit 1 } } catch { Write-Host "ERROR: $_" -ForegroundColor Red exit 2 } } try { if ($Monitoring) { Invoke-Monitoring } else { Write-Host "Use: -Monitoring" -ForegroundColor Yellow } } catch { throw } finally { Write-Host "`n========================================`n" -ForegroundColor Cyan } function Invoke-Remediation { <# .SYNOPSIS Herstelt de configuratie naar de gewenste staat .DESCRIPTION Dit is een monitoring-only control, remediation delegeert naar monitoring #> [CmdletBinding()] param() Write-Host "[INFO] Dit is een monitoring-only control" -ForegroundColor Yellow Write-Host "[INFO] Running monitoring check..." -ForegroundColor Cyan Invoke-Monitoring }