-
Notifications
You must be signed in to change notification settings - Fork 5k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #1029 from Ren-Roros-Digital/TeamsGlobalMeetingPolicy
Added Teams Global Meeting Policy standard
- Loading branch information
Showing
1 changed file
with
81 additions
and
0 deletions.
There are no files selected for viewing
81 changes: 81 additions & 0 deletions
81
Modules/CIPPCore/Public/Standards/Invoke-CIPPStandardTeamsGlobalMeetingPolicy.ps1
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,81 @@ | ||
| Function Invoke-CIPPStandardTeamsGlobalMeetingPolicy { | ||
| <# | ||
| .FUNCTIONALITY | ||
| Internal | ||
| .COMPONENT | ||
| (APIName) TeamsGlobalMeetingPolicy | ||
| .SYNOPSIS | ||
| (Label) Define Global Meeting Policy for Teams | ||
| .DESCRIPTION | ||
| (Helptext) Defines the CIS recommended global meeting policy for Teams. This includes AllowAnonymousUsersToJoinMeeting, AllowAnonymousUsersToStartMeeting, AutoAdmittedUsers, AllowPSTNUsersToBypassLobby, MeetingChatEnabledType, DesignatedPresenterRoleMode, AllowExternalParticipantGiveRequestControl | ||
| (DocsDescription) Defines the CIS recommended global meeting policy for Teams. This includes AllowAnonymousUsersToJoinMeeting, AllowAnonymousUsersToStartMeeting, AutoAdmittedUsers, AllowPSTNUsersToBypassLobby, MeetingChatEnabledType, DesignatedPresenterRoleMode, AllowExternalParticipantGiveRequestControl | ||
| .NOTES | ||
| CAT | ||
| Teams Standards | ||
| TAG | ||
| "lowimpact" | ||
| ADDEDCOMPONENT | ||
| {"type":"Select","name":"standards.TeamsGlobalMeetingPolicy.DesignatedPresenterRoleMode","label":"Default value of the `Who can present?`","values":[{"label":"EveryoneUserOverride","value":"EveryoneUserOverride"},{"label":"EveryoneInCompanyUserOverride","value":"EveryoneInCompanyUserOverride"},{"label":"EveryoneInSameAndFederatedCompanyUserOverride","value":"EveryoneInSameAndFederatedCompanyUserOverride"},{"label":"OrganizerOnlyUserOverride","value":"OrganizerOnlyUserOverride"}]} | ||
| IMPACT | ||
| Low Impact | ||
| POWERSHELLEQUIVALENT | ||
| Set-CsTeamsMeetingPolicy -AllowAnonymousUsersToJoinMeeting \$false -AllowAnonymousUsersToStartMeeting \$false -AutoAdmittedUsers EveryoneInCompanyExcludingGuests -AllowPSTNUsersToBypassLobby \$false -MeetingChatEnabledType EnabledExceptAnonymous -DesignatedPresenterRoleMode \$DesignatedPresenterRoleMode -AllowExternalParticipantGiveRequestControl \$false | ||
| RECOMMENDEDBY | ||
| "CIS 3.0" | ||
| UPDATECOMMENTBLOCK | ||
| Run the Tools\Update-StandardsComments.ps1 script to update this comment block | ||
| .LINK | ||
| https://docs.cipp.app/user-documentation/tenant/standards/edit-standards | ||
| #> | ||
|
|
||
| param($Tenant, $Settings) | ||
| $CurrentState = New-TeamsRequest -TenantFilter $Tenant -Cmdlet 'Get-CsTeamsMeetingPolicy' -CmdParams @{Identity = 'Global'} | ||
| | Select-Object AllowAnonymousUsersToJoinMeeting, AllowAnonymousUsersToStartMeeting, AutoAdmittedUsers, AllowPSTNUsersToBypassLobby, MeetingChatEnabledType, DesignatedPresenterRoleMode, AllowExternalParticipantGiveRequestControl | ||
|
|
||
| if ($null -eq $Settings.DesignatedPresenterRoleMode) { $Settings.DesignatedPresenterRoleMode = $CurrentState.DesignatedPresenterRoleMode } | ||
|
|
||
| $StateIsCorrect = ($CurrentState.AllowAnonymousUsersToJoinMeeting -eq $false) -and | ||
| ($CurrentState.AllowAnonymousUsersToStartMeeting -eq $false) -and | ||
| ($CurrentState.AutoAdmittedUsers -eq 'EveryoneInCompanyExcludingGuests') -and | ||
| ($CurrentState.AllowPSTNUsersToBypassLobby -eq $false) | ||
| ($CurrentState.MeetingChatEnabledType -eq 'EnabledExceptAnonymous') | ||
| ($CurrentState.DesignatedPresenterRoleMode -eq $Settings.DesignatedPresenterRoleMode) | ||
| ($CurrentState.AllowExternalParticipantGiveRequestControl -eq $false) | ||
|
|
||
| if ($Settings.remediate -eq $true) { | ||
| if ($StateIsCorrect -eq $true) { | ||
| Write-LogMessage -API 'Standards' -tenant $Tenant -message 'Teams Global Policy already set.' -sev Info | ||
| } else { | ||
| $cmdparams = @{ | ||
| Identity = 'Global' | ||
| AllowAnonymousUsersToJoinMeeting = $false | ||
| AllowAnonymousUsersToStartMeeting = $false | ||
| AutoAdmittedUsers = 'EveryoneInCompanyExcludingGuests' | ||
| AllowPSTNUsersToBypassLobby = $false | ||
| MeetingChatEnabledType = 'EnabledExceptAnonymous' | ||
| DesignatedPresenterRoleMode = $Settings.DesignatedPresenterRoleMode | ||
| AllowExternalParticipantGiveRequestControl = $false | ||
| } | ||
|
|
||
| try { | ||
| New-TeamsRequest -TenantFilter $Tenant -Cmdlet 'Set-CsTeamsMeetingPolicy' -CmdParams $cmdparams | ||
| Write-LogMessage -API 'Standards' -tenant $Tenant -message 'Updated Teams Global Policy' -sev Info | ||
| } catch { | ||
| $ErrorMessage = Get-NormalizedError -Message $_.Exception.Message | ||
| Write-LogMessage -API 'Standards' -tenant $Tenant -message "Failed to set Teams Global Policy. Error: $ErrorMessage" -sev Error | ||
| } | ||
| } | ||
| } | ||
|
|
||
| if ($Settings.alert -eq $true) { | ||
| if ($StateIsCorrect -eq $true) { | ||
| Write-LogMessage -API 'Standards' -tenant $Tenant -message 'Teams Global Policy is set correctly.' -sev Info | ||
| } else { | ||
| Write-LogMessage -API 'Standards' -tenant $Tenant -message 'Teams Global Policy is not set correctly.' -sev Alert | ||
| } | ||
| } | ||
|
|
||
| if ($Setings.report -eq $true) { | ||
| Add-CIPPBPAField -FieldName 'TeamsGlobalMeetingPolicy' -FieldValue $StateIsCorrect -StoreAs bool -Tenant $Tenant | ||
| } | ||
| } |