Light mode
Microsoft Teams Baseline Report
| Tenant Display Name | Tenant Domain Name | Report Date | Baseline Version | Module Version |
|---|---|---|---|---|
| tqhjy | tqhjy.onmicrosoft.com | 10/15/2026 21:46:53 Coordinated Universal Time | 1 | 2.0.0 |
Policy Indicators:
BOD 25-01 Requirement
Required by CISA BOD 25-01
Automated Check
Automatically verified by ScubaGear
TEAMS-1 Meeting Policies
| Control ID | Requirement | Result | Criticality | Details |
|---|---|---|---|---|
| MS.TEAMS.1.1v1 | External meeting participants SHOULD NOT be enabled to request control of shared desktops or windows. | Pass | Should | Requirement met |
| MS.TEAMS.1.2v2 | Anonymous users SHALL NOT be enabled to start Microsoft Teams meetings. | Pass | Shall | Requirement met |
| MS.TEAMS.1.3v1 | Anonymous users and dial-in callers SHOULD NOT be admitted automatically. | Pass | Should | Requirement met |
| MS.TEAMS.1.4v1 | Internal users SHOULD be admitted to Microsoft Teams meetings automatically. | Pass | Should | Requirement met |
| MS.TEAMS.1.5v1 | Dial-in users SHOULD NOT be enabled to bypass the lobby. | Pass | Should | Requirement met |
| MS.TEAMS.1.6v1 | Meeting recording SHOULD be disabled. | Pass | Should | Requirement met |
| MS.TEAMS.1.7v2 | "Record an event" SHOULD NOT be set to "Always record." | Pass | Should | Requirement met |
TEAMS-2 External User Access
| Control ID | Requirement | Result | Criticality | Details |
|---|---|---|---|---|
| MS.TEAMS.2.1v2 | External access for users SHALL only be enabled on a per-domain basis. | Pass | Shall | Requirement met |
| MS.TEAMS.2.2v2 | Unmanaged users SHALL NOT be enabled to initiate contact with internal users. | Pass | Shall | This policy is not applicable to GCC, GCC High, or DOD environments. See Secure Configuration Baseline policy for more info |
| MS.TEAMS.2.3v2 | Internal users SHOULD NOT be enabled to initiate contact with unmanaged users. | Pass | Should | This policy is not applicable to GCC, GCC High, or DOD environments. See Secure Configuration Baseline policy for more info |
TEAMS-4 Teams Email Integration
| Control ID | Requirement | Result | Criticality | Details |
|---|---|---|---|---|
| MS.TEAMS.4.1v1 | Microsoft Teams email integration SHALL be disabled. | Pass | Shall | This policy is not applicable to GCC, GCC High, or DOD environments. See Secure Configuration Baseline policy for more info |
TEAMS-5 App Management
| Control ID | Requirement | Result | Criticality | Details |
|---|---|---|---|---|
| MS.TEAMS.5.1v2 | Agencies SHOULD only allow installation of Microsoft applications approved by the agency. | Pass | Should | Requirement met |
| MS.TEAMS.5.2v2 | Agencies SHOULD only allow installation of third-party applications approved by the agency. | Pass | Should | Requirement met |
| MS.TEAMS.5.3v2 | Agencies SHOULD only allow installation of custom applications approved by the agency. | Pass | Should | Requirement met |