Teams: Only Organizers Can Present (Default)

<# .SYNOPSIS Only Organizers Can Present .DESCRIPTION Restricts presentation rights to organizers only for enhanced security .NOTES NL Baseline v2.0 #> #Requires -Version 5.1 #Requires -Modules MicrosoftTeams [CmdletBinding()] param([switch]$Monitoring) $ErrorActionPreference = 'Stop' Write-Host "`n========================================" -ForegroundColor Cyan Write-Host "Only Organizers Present" -ForegroundColor Cyan Write-Host "========================================`n" -ForegroundColor Cyan function Invoke-Monitoring { try { Connect-MicrosoftTeams -ErrorAction Stop $policy = Get-CsTeamsMeetingPolicy -Identity Global $result = @{ isCompliant = ($policy.DesignatedPresenterRoleMode -eq 'OrganizerOnlyUserOverride') presenterMode = $policy.DesignatedPresenterRoleMode } Write-Host " Presenter Mode: $($policy.DesignatedPresenterRoleMode)" -ForegroundColor $( if ($result.isCompliant) { 'Green' }else { 'Yellow' } ) Write-Host "`n Presenter Options:" -ForegroundColor Cyan Write-Host " • OrganizerOnlyUserOverride: Organizer only (most secure)" -ForegroundColor Green Write-Host " • EveryoneInCompanyUserOverride: Everyone in organization" -ForegroundColor Yellow Write-Host " • EveryoneUserOverride: Everyone including external" -ForegroundColor Red Write-Host "`n Security Benefits:" -ForegroundColor Cyan Write-Host " • Prevents unauthorized presentations" -ForegroundColor Gray Write-Host " • Maintains meeting control" -ForegroundColor Gray Write-Host " • Reduces security risks" -ForegroundColor Gray Write-Host " • Ensures proper authorization" -ForegroundColor Gray if ($result.isCompliant) { Write-Host "`n[OK] COMPLIANT - Only organizers can present" -ForegroundColor Green exit 0 } else { Write-Host "`n[FAIL] NON-COMPLIANT - Presentation rights too broad!" -ForegroundColor Red exit 1 } } catch { Write-Host "ERROR: $_" -ForegroundColor Red exit 2 } } try { if ($Monitoring) { Invoke-Monitoring } else { Write-Host "Use: -Monitoring" -ForegroundColor Yellow } } catch { throw } finally { Write-Host "`n========================================`n" -ForegroundColor Cyan } function Invoke-Remediation { <# .SYNOPSIS Herstelt de configuratie naar de gewenste staat .DESCRIPTION Dit is een monitoring-only control, remediation delegeert naar monitoring #> [CmdletBinding()] param() Write-Host "[INFO] Dit is een monitoring-only control" -ForegroundColor Yellow Write-Host "[INFO] Running monitoring check..." -ForegroundColor Cyan Invoke-Monitoring }