Merge pull request #15909 from MicrosoftDocs/main

Publish main to live, Tuesday 10:30 AM PST, 10/29

Teams/configure-meetings-baseline-protection.md

@@ -44,6 +44,7 @@ The following table describes which actions we restrict for baseline meetings an
 |People dialing in can bypass the lobby|**Off**|Template|Yes|
 |Prevent copying chat content to clipboard|**Off**|Label|Yes|
 |Record automatically|**Off**|Template|No|
+|Require a verification check from|**Not required**|Label or Template|Yes|
 |Who can bypass the lobby?|**People in my org, trusted orgs, and guests**|Template|No|
 |Who can present|**People in my org and guests**|Teams admin center|No|
 |Who can record|**Organizers, co-organizers, and presenters**|Template|No|

Teams/configure-meetings-highly-sensitive-protection.md

@@ -77,6 +77,7 @@ The following table describes which actions we'll restrict for highly sensitive
 |People dialing in can bypass the lobby|**Off**|Label|Yes|
 |Prevent copying chat content to clipboard|**On**|Label|Yes|
 |Record meetings automatically|**Off**|Template|Yes|
+|Require a verification check from|**Anonymous users and people from untrusted organizations**|Label or Template|Yes|
 |Who can bypass the lobby?|**Only organizers and co-organizers**|Label|Yes|
 |Who can present|**Only organizers and co-organizers**|Label|Yes|
 |Who can record|**Only organizers and co-organizers**|Template|No|

Teams/configure-meetings-sensitive-protection.md

@@ -41,6 +41,7 @@ The following table describes which actions we'll restrict for sensitive meeting
 |People dialing in can bypass the lobby|**Off**|Label|Yes|
 |Prevent copying chat content to clipboard|**Off**|Label|No|
 |Record automatically|**Off**|Template|No|
+|Require a verification check from|**Anonymous users**|Label or Template|Yes|
 |Who can bypass the lobby?|**People who were invited**|Label|Yes|
 |Who can present|**People in my org and guests**|Label|Yes|
 |Who can record|**Organizer and co-organizers**|Label|Yes|

Teams/configure-meetings-three-tiers-protection.md

@@ -59,6 +59,7 @@ The following table summarizes the configurations for each tier. Use these confi
 |People dialing in can bypass the lobby|**Off**|**Off**|**Off**|**Off**|
 |Prevent copying chat content to clipboard|**Off**|**Off**|**On**|**On**|
 |Record meetings automatically|**Off**|**Off**|**Off**|**Off**|
+|Require a verification check from|**Not required**|**Anonymous users**|**Anonymous users and people from untrusted organizations**|**Anonymous users and people from untrusted organizations**|
 |Who can bypass the lobby?|**People in my org, trusted orgs, and guests**|**People who were invited**|**Only organizers and co-organizers**|**Only organizers and co-organizers**|
 |Who can present|**People in my org and guests**|**People in my org and guests**|**Only organizers and co-organizers**|**Only organizers and co-organizers**|
 |Who can record|**Organizers, co-organizers, and presenters**|**Organizers and co-organizers**|Disabled due to watermarking|Disabled due to watermarking|
@@ -84,6 +85,7 @@ Some options are only available in sensitivity labels and some are only availabl
 - Meeting recording
 - Prevent copying chat content to clipboard
 - Watermarking
+- Require a verification check from
 
 Sensitivity labels and templates can be used together to help you meet your compliance needs. For more information, see [Use Teams meeting templates, sensitivity labels, and admin policies together](meeting-templates-sensitivity-labels-policies.md).
 

Teams/create-custom-meeting-template.md

@@ -60,7 +60,7 @@ Once the template has been created, it may take up to 24 hours to be available t
 
 Note that if you change the options of an existing template, the changes affect new meetings scheduled using that template as well as any meetings that have already been scheduled with that template.
 
-#### Security
+### Security
 
 |Option|Description|
 |:------|:----------|
@@ -70,30 +70,31 @@ Note that if you change the options of an existing template, the changes affect
 |End-to-end encryption|Specifies if the meeting uses end-to-end encryption. Recording and transcription don't work if this is on.|
 |Enable watermark for screenshare|Specifies if a watermark is overlaid on content that is shared on screen in the meeting.|
 |Enable watermark for video|Specifies if a watermark is overlaid on attendees' video feeds in the meeting.|
+|Require verification checks from|Controls whether anonymous users must complete a verification check to join meetings and webinars in your org.|
 |Restrict participants from copying or forwarding meeting chat messages|Prevents participants from copying or forwarding content in the meeting chat.|
 
-#### Audio & video
+### Audio & video
 
 |Option|Description|
 |:------|:----------|
 |Allow mic for attendees|When **On**, attendees can unmute.|
 |Allow camera for attendees|When **On**, attendees can turn on their cameras.|
 
-#### Recording & transcription
+### Recording & transcription
 
 |Option|Description|
 |:------|:----------|
 |Record meetings automatically|When **On** meetings are recorded automatically.|
 |Who can record|Specifies whether meetings can be recorded by organizers and co-organizers only or by organizers, co-organizers, and presenters.|
 |Copilot|Specifies if Copilot uses a meeting transcript.|
 
-#### Roles
+### Roles
 
 |Option|Description|
 |:------|:----------|
 |Announce when people dialing in join or leave|Specifies if a sound is played when people calling in by phone join or leave the meeting.|
 
-#### Meeting engagement
+### Meeting engagement
 
 |Option|Description|
 |:------|:----------|

Teams/custom-meeting-templates-overview.md

@@ -31,25 +31,28 @@ The following meeting options can be controlled by using a meeting template:
 
 |Option|Description|
 |:------|:----------|
-|*Security*||
+|**Security**||
 |Sensitivity label|Specifies the sensitivity label to be used for the meeting.|
 |Lobby|Specifies who can bypass the lobby and join the meeting directly.|
 |End-to-end encryption|Specifies if the meeting is encrypted.|
 |Watermarks|Specifies if watermarks are used for camera feeds and content that is shared on screen in the meeting.|
 |Restrict participants from copying or forwarding meeting chat messages|Prevents participants from copying or forwarding content in the meeting chat.|
-|*Audio & video*||
+|Require a verification check from|Controls whether anonymous users must complete a verification check to join meetings and webinars in your org.|
+|**Audio & video**||
 |Allow mic and camera for attendees|Specifies if attendees can unmute and use their camera.|
 |*Recording & transcription*||
 |Recording|Specifies who can record and if the meeting is recorded automatically.|
 |Copilot|Specifies how transcripts are used for Microsoft 365 Copilot in Teams meetings and events.|
 |*Roles*||
 |Announce when people dialing in join or leave|Specifies if a sound plays when people calling in by phone join or leave the meeting.|
-|*Meeting engagement*||
+|**Meeting engagement**||
 |Meeting chat|Specifies if the meeting chat is available. Can also be used to prevent chat before and after the meeting.|
 |Allow reactions|Specifies if attendees can use reactions or raise their hand in the meeting.|
 |Q&A|Specifies if attendees can use the Q&A feature to ask questions during the meeting.|
 |Manage what attendees see|Specifies if meeting organizers can preview and approve content being shared on screen before other meeting participants can see it.|
 
+|Require a verification check from|**Not required**|Label or Template|Yes|
+
 Some examples of when a template can be useful are:
 
 - Enforcing automatic meeting recording for certain types of meetings.
@@ -71,6 +74,7 @@ Templates have the option of specifying a sensitivity label. Labels can also be
 - Meeting chat
 - Prevent copying chat content to clipboard
 - Record meetings automatically
+- Require a verification check from
 - Who can bypass the lobby?
 - Who can present
 - Who can record

Teams/join-verification-check.md

@@ -0,0 +1,106 @@
+---
+title: Require verification checks to join Teams meetings and webinars in your org
+ms.author: wlibebe
+author: wlibebe
+manager: pamgreen
+ms.reviewer: nraghavan
+ms.date: 10/29/2024
+ms.topic: how-to
+ms.tgt.pltfrm: cloud
+ms.service: msteams
+audience: Admin
+appliesto: 
+  - Microsoft Teams
+ms.localizationpriority: medium
+search.appverid: MET150
+f1.keywords:
+- CSH
+ms.custom: 
+ms.collection: 
+  - M365-collaboration
+  - m365initiative-meetings
+  - highpri
+  - Tier1
+description: Learn how to require verification checks for Microsoft Teams meetings and webinars in your org to prevent bots from joining.
+---
+
+# Require verification checks to join Teams meetings and webinars in your org
+
+**APPLIES TO:** ![Image of a checkmark for yes](media/circle-check.png) Meetings ![Image of a checkmark for yes](media/circle-check.png) Webinars ![Image of a x for no](media/x-for-no.png) Town halls
+
+For a seamless experience, it's important to manage how anonymous participants join meetings and webinars in your org. Anonymous participants include users who join a Teams meeting without signing in, via the Teams web app, or through external meeting platforms.
+
+If your organizers allow anonymous users to bypass the lobby, web bots might join and disrupt their meetings and webinars. As an admin, you can require human verification checks for anonymous users to join meetings in your org. Requiring a CAPTCHA challenge can prevent unwanted web-based bots from joining, recording, and causing disturbances in meetings and webinars.
+
+:::image type="content" source="media/captcha-audio-small.png" alt-text="Screenshot of a user named Daniela completing an audio CAPTCHA challenge to join a meeting." lightbox="media/captcha-audio-expand.png":::
+:::image type="content" source="media/captcha-text-small.png" alt-text="Screenshot of a user named Daniela completing a text CAPTCHA challenge to join a meeting." lightbox="media/captcha-text-expand.png":::
+
+## Manage verification checks for meetings and webinars in your org
+
+You can use the Teams admin center or PowerShell manage verification checks for meetings and webinars in your org. You could also use a sensitivity label in Purview or a meeting template to require verification checks. To use meeting templates and sensitivity labels, you must have a Teams Premium license.
+
+|Teams admins center policy value |PowerShell setting value | Behavior|
+|---------|---------|---------------|
+|Not required|NotRequired| **This is the default value**. When organizers with this policy create meetings and webinars, no users in that meeting complete a verification check before joining the meeting.|
+|Anonymous users|AnonymousUsers| When organizers with this policy create meetings and webinars, anonymous users must complete a verification check before joining the meeting.|
+|Anonymous users and people from untrusted organizations|AnonymousUsersAndUntrustedOrganizations| When organizers with this policy create meetings and webinars, anonymous users and people from untrusted organizations must complete a verification check before joining the meeting.  |
+
+### Manage verification checks in the Teams admin center
+
+1. Open the Teams admin center.
+2. Expand **Meetings** from the navigation pane.
+3. Under **Meetings**, select **Meeting Policies**.
+4. Either select an existing policy or create a new one.
+5. Navigate to the **Meeting join & lobby** section and select one of the following options for **Require a verification check from:**
+   - Not required (default)
+   - Anonymous users
+   - Anonymous users and people from untrusted organizations
+6. Select **Save**
+
+### Manage verification checks using PowerShell
+
+To  manage how users in your org use Copilot for Teams meetings and events, use the **`-CaptchaVerificationForMeetingJoin`** parameter within the PowerShell [**CsTeamsMeetingPolicy**](/powershell/module/teams/set-csteamsmeetingpolicy) cmdlet.
+
+To require anonymous users to complete a verification check before joining the meetings and webinars created by organizers with this policy, use the following script:
+
+```PowerShell
+Set-CsTeamsMeetingPolicy -Identity <policy name> -CaptchaVerificationForMeetingJoin AnonymousUsers
+```
+
+Use the following script to require anonymous users and users from untrusted organizations to complete a verification check before joining meetings and webinars created by organizers under this policy:
+
+```PowerShell
+Set-CsTeamsMeetingPolicy -Identity <policy name> -CaptchaVerificationForMeetingJoin AnonymousUsersAndUntrustedOrganizations
+```
+
+## Client and platform support
+
+### Supported
+
+Requiring verification checks is supported on the following surfaces and clients:
+
+**Clients:** Teams (T2.1, T2.2), Outlook
+
+**Platforms:** Desktop, Web, Virtualized Desktop Infrastructure (VDI), and mobile application (iOS and Android)
+
+### Not supported
+
+Requiring verification checks isn't supported on the following surfaces and clients:
+
+**Clients:** Cloud Video Interop (CVI), Azure Communication Services (ACS) platform
+
+**Platforms:** Third party devices
+
+## Related articles
+
+- [Manage meeting templates in Microsoft Teams - Microsoft Teams | Microsoft Learn](manage-meeting-templates.md)
+- [Use Teams meeting templates, sensitivity labels, and admin policies together for sensitive meetings](meeting-templates-sensitivity-labels-policies.md)
+- [Configure Teams meetings with baseline protection - Microsoft Teams | Microsoft Learn](configure-meetings-baseline-protection.md)
+- [Configure Teams meetings with protection for sensitive data](configure-meetings-sensitive-protection.md)
+- [Configure Teams meetings with protection for highly sensitive data](configure-meetings-highly-sensitive-protection.md)
+- [Overview of custom meeting templates in Microsoft Teams](custom-meeting-templates-overview.md)
+- [IT admins - Create a custom meeting template in Microsoft Teams](create-custom-meeting-template.md)
+- [Use sensitivity labels to protect calendar items, Teams meetings, and chat](meeting-templates-sensitivity-labels-policies.md)
+- [Plan for Teams meetings](plan-meetings.md)
+- [Plan for Teams webinars](plan-webinars.md)
+- [Plan for Teams town halls](plan-town-halls.md)

Teams/limits-specifications-teams.md

@@ -92,12 +92,13 @@ The following limitations also apply:
 Users who participate in conversations that are part of the chat list in Teams must have an Exchange Online (cloud-based) mailbox for an admin to search chat conversations. That's because conversations that are part of the chat list are stored in the cloud-based mailboxes of the chat participants. If a chat participant doesn't have an Exchange Online mailbox, the admin can't search or place a hold on chat conversations. For example, in an Exchange hybrid deployment, users with on-premises mailboxes might be able to participate in conversations that are part of the chat list in Teams. However, in this case, content from these conversations isn't searchable and can't be placed on hold because the users don't have cloud-based mailboxes. (For more, see [How Exchange and Microsoft Teams interact](exchange-teams-interact.md).)
 
 
-|Feature  | Maximum limit  |
-|---------|---------|
-|Number of people in a private chat<sup>1</sup>  | 250<sup>2</sup> |
-|Number of people in a video or audio call from chat | 20 |
-|Number of file attachments<sup>3</sup>  |10     |
-|Chat size | Approximately 28 KB per post<sup>4</sup> |
+|Feature                                             | Maximum limit                            |
+|----------------------------------------------------|------------------------------------------|
+|Number of people in a private chat<sup>1</sup>      | 250<sup>2</sup>                          |
+|Number of people in a video or audio call from chat | 20                                       |
+|Number of file attachments<sup>3</sup>              |10                                        |
+|File size limitation                                |100 MB                                    |
+|Chat size                                           | Approximately 28 KB per post<sup>4</sup> |
 
 <sup>1</sup> If you have more than 20 people in a chat, the following chat features are turned off: Outlook automatic replies and Teams status messages; typing indicator; video and audio calling; sharing; read receipts. The "Set Delivery Options" button (!) is also removed when private group chats contain more than 20 members.
 

Teams/meeting-templates-sensitivity-labels-policies.md

@@ -50,6 +50,7 @@ The following table shows a list of Teams features that may be useful for managi
 |People dialing in can bypass the lobby|Sets the default setting for new meetings.|If the label is controlling who can bypass the lobby, this setting is enforced **On** or **Off**, otherwise it's uncontrolled.|If not controlled by a sensitivity label, can be set to **On** or **Off**. Setting can be enforced or meeting organizer can be allowed to change.|If not enforced by a sensitivity label or template, meeting owner can set to **On** or **Off**.|
 |Prevent copying chat content to clipboard*|Copy prevention can be disabled (but not enforced) by admin policy. Admin policy is overridden by sensitivity label if used.|Can prevent the meeting chat from being copied or forwarded. |If enabled in admin policy and not controlled by a sensitivity label, can be set to **On** or **Off**. Setting can be enforced or meeting organizer can be allowed to change.|Meeting organizer can turn **On** or **Off** unless setting is disabled by admin policy or enforced by sensitivity label or template.|
 |Record automatically|Meeting recording can be disabled completely using a meeting policy, but there's no admin policy for *Record automatically*.|Can enforce or prevent automatic meeting recording or be left uncontrolled. Can enforce automatic recording even if admin policy for recording is **Off**.|If meeting recording is allowed by admin policy and automatic recording isn't controlled by a sensitivity label, can be set to **On** or **Off** and can enforce the setting or allow the meeting organizer to change it.|Meeting organizer can turn **On** or **Off** unless the setting is enforced **On** or **Off** by a meeting template or sensitivity label or admin policy prevents recording.|
+|Require a verification check from|Control whether anonymous users must complete a verification check to join meetings and webinars in your org.|Can require anonymous users to complete a verification check to join meetings and webinars.|If enabled in admin policy and not controlled by a sensitivity label, can be set to **On** or **Off**.|No setting.|
 |Who can bypass the lobby|Sets the default setting for new meetings.|Can enforce a particular option for who can bypass the lobby, or can be left uncontrolled.|If not controlled by a sensitivity label, selects a setting for who can bypass the lobby. Setting can be enforced or meeting organizer can be allowed to change.|Meeting organizer can choose who can bypass the lobby unless the setting is enforced by a label or template.|
 |Who can present|Sets the default setting for new meetings. Available values are **Everyone**, **People in my org and guests**, and **Only organizers and co-organizers**.|Can enforce settings of **Everyone**, **People in my org and guests**, **Let meeting organizer select specific people**, or **Only organizers and co-organizers**, or can be left uncontrolled.|No setting|Meeting organizer can select who can present unless enforced by a sensitivity label.|
 |Who can record|Meeting recording can be disabled completely using a meeting policy, but there's no admin policy for *Who can record*.|Can enforce settings of **Organizers and co-organizers** or **Organizers and presenters**, or can be left uncontrolled.|If not controlled by a sensitivity label, selects a setting of **Organizers and co-organizers** or **Organizers, co-organizers, and presenters**. Setting can be enforced or meeting organizer can be allowed to change.|Meeting organizer can choose who can record—**Organizers and co-organizers** or **Organizers, co-organizers, and presenters**—unless the setting is enforced by a label or template.|