What’s the skinny?
Microsoft has released an update to the MicrosoftTeams PowerShell module (v1.1.4) that supports a new setting that allows an IT admin to set the meeting lobby options for admitted users to “OnlyMe”. This is a welcome update as we head back to school to keep students safe!
Note: You will likely want to target your staff and faculty with this policy, as it is highly recommended that students do not have the ability to create private meetings. However, if you do have a subset of students that you do allow meeting creation, this would be the next logical setting to configure to ensure maximum safety precautions are met.
Connect to and update the Microsoft Teams module
Assuming you have the PowerShell module for SkypeOnline or Microsoft Teams installed, open PowerShell as an admin and use the following script to connect to your Microsoft Teams environment via PowerShell.
Import-Module SkypeOnlineConnector $userCredential = Get-Credential $sfbSession = New-CsOnlineSession -Credential $userCredential Import-PSSession $sfbSession Connect-MicrosoftTeams -Credential $userCredential
Once connected, update your Microsoft Teams module and select [Y] or [A] (to your comfort level) upon the prompts:
If you don’t have the MicrosoftTeams module or the SkypeOnline module installed, visit these links for more info:
Configure “OnlyMe” lobby option
Using our trusty friend, Set-CSTeamsMeetingPolicy cmdlet, a “OrganizerOnly” value for the “AutoAdmittedUsers” parameter is supported. This is what we are going to leverage to change the meeting policy’s default setting for admitted users upon a meeting creation by the end users.
Set-CsTeamsMeetingPolicy -Identity Education_SecondaryStaff -AutoAdmittedUsers OrganizerOnly
The value for the -Identity parameter is going to match the meeting policy that is in your Teams Admin Center that you want to modify. In this example, I am modifying the meeting policy that is being assigned to all secondary staff members, aptly named Education_SecondaryStaff.
Remember that if you want to change this value, it’s going to default to “OnlyMe” for all users, including users who dial in, or PSTN users. Depending on your meeting policy, you must first ensure that the “AllowPSTNUsersToBypassLobby” option is set to false, or you will receive a warning similar to this:
Invalid value combination AutoAdmittedUsers: OrganizerOnly and AllowPSTNUsersToBypassLobby: True. When AutoAdmittedUsers is set to Everyone,
AllowPSTNUsersToBypassLobby must not be False. When AutoAdmittedUsers is set to OrganizerOnly, AllowPSTNUsersToBypassLobby must not be True.
The same will also be true if you attempt to disable PSTNUsers but your “AutoAdmittedUsers” is set to “Everyone”. So it may be best to run this series of cmdlets in sequential order to get to the desired state:
Set-CsTeamsMeetingPolicy -Identity Education_SecondaryStaff -AutoAdmittedUsers EveryoneInCompany Set-CsTeamsMeetingPolicy -Identity Education_SecondaryStaff -AllowPSTNUsersToBypassLobby $False Set-CsTeamsMeetingPolicy -Identity Education_SecondaryStaff -AutoAdmittedUsers OrganizerOnly
You can verify your results in a couple of ways:
Teams Admin Center
We can see how our meeting policy looks in the Teams Admin Center.
- Open your Teams Admin Center and sign in if prompted
- Go to Meeting Policies and select the meeting policy you configured
- Scroll to the Participants & guests section
Notice under the Automatically admit people selection has a blank option in the drop down field? Until this UI is updated to support “OnlyMe” or “OrganizerOnly”, then it will remain blank.
Update 9/17/20: Now available in the Teams Admin Center UI, under the Automatically admit people, you can now see your policy should be set Organizer Only. You can now set this via the UI, instead of using the PowerShell commands above.
New Meeting – Meeting Options pane
You can also test this at the end user level, by creating a new meeting as the user who has this meeting policy assigned and open up the meeting options pane. The default selection should state “OnlyMe” for “Who can bypass the lobby?” but can still be modified based on the end user’s desires, as well as “Always let callers bypass the lobby” set to “No”.
As stated above this is a much welcome addition right as back to school approaches. Please note that this may still be rolling out in tenants worldwide, so if you don’t see it yet, even if you have updated your MicrosoftTeams PS module, check back in the next couple of weeks and it should be there.