Teams: Enable Watermarking For Sensitive Meetings

<# .SYNOPSIS Watermarking Enabled for Sensitive Meetings .DESCRIPTION Enables watermarking for Teams meetings to prevent unauthorized content sharing .NOTES NL Baseline v2.0 Requires: Microsoft 365 E5 or Advanced Communications add-on #> #Requires -Version 5.1 #Requires -Modules MicrosoftTeams [CmdletBinding()] param([switch]$Monitoring) $ErrorActionPreference = 'Stop' Write-Host "`n========================================" -ForegroundColor Cyan Write-Host "Watermarking Enabled" -ForegroundColor Cyan Write-Host "========================================`n" -ForegroundColor Cyan function Invoke-Monitoring { try { Connect-MicrosoftTeams -ErrorAction Stop $policy = Get-CsTeamsMeetingPolicy -Identity Global $result = @{ isCompliant = $policy.AllowWatermarkForCameraVideo videoWatermark = $policy.AllowWatermarkForCameraVideo screenWatermark = $policy.AllowWatermarkForScreenSharing } Write-Host " Video Watermark: $(if($policy.AllowWatermarkForCameraVideo){'ENABLED'}else{'DISABLED'})" -ForegroundColor $( if ($policy.AllowWatermarkForCameraVideo) { 'Green' }else { 'Yellow' } ) Write-Host " Screen Share Watermark: $(if($policy.AllowWatermarkForScreenSharing){'ENABLED'}else{'DISABLED'})" -ForegroundColor $( if ($policy.AllowWatermarkForScreenSharing) { 'Green' }else { 'Yellow' } ) Write-Host "`n Security Benefits:" -ForegroundColor Cyan Write-Host " • Prevents unauthorized content sharing" -ForegroundColor Gray Write-Host " • Deters screen recording" -ForegroundColor Gray Write-Host " • Maintains content confidentiality" -ForegroundColor Gray Write-Host " • Reduces data exposure risk" -ForegroundColor Gray Write-Host "`n Note: Watermarking helps prevent unauthorized content sharing" -ForegroundColor Gray Write-Host " Requires Microsoft 365 E5 or Advanced Communications add-on" -ForegroundColor Gray if ($result.isCompliant) { Write-Host "`n[OK] COMPLIANT - Watermarking enabled" -ForegroundColor Green exit 0 } else { Write-Host "`n[FAIL] NON-COMPLIANT - Watermarking disabled!" -ForegroundColor Red exit 1 } } catch { Write-Host "ERROR: $_" -ForegroundColor Red exit 2 } } try { if ($Monitoring) { Invoke-Monitoring } else { Write-Host "Use: -Monitoring" -ForegroundColor Yellow } } catch { throw } finally { Write-Host "`n========================================`n" -ForegroundColor Cyan } function Invoke-Remediation { <# .SYNOPSIS Herstelt de configuratie naar de gewenste staat .DESCRIPTION Dit is een monitoring-only control, remediation delegeert naar monitoring #> [CmdletBinding()] param() Write-Host "[INFO] Dit is een monitoring-only control" -ForegroundColor Yellow Write-Host "[INFO] Running monitoring check..." -ForegroundColor Cyan Invoke-Monitoring }