-
Notifications
You must be signed in to change notification settings - Fork 107
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #518 from weyCC81/wey-TeamsConnect&Test
Add Connection to Teams and the first Meeting Policies Tests
- Loading branch information
Showing
11 changed files
with
268 additions
and
15 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,149 @@ | ||
| BeforeDiscovery { | ||
| try { | ||
|
|
||
| $TeamsMeetingPolicy = Get-CsTeamsMeetingPolicy | ||
| Write-Verbose "Found $($TeamsMeetingPolicy.Count) Teams Meeting policies" | ||
| $TeamsMeetingPolicyGlobal = $TeamsMeetingPolicy | Where-Object { $_.Identity -eq "Global" } | ||
| Write-Verbose "Filtered $( $TeamsMeetingPolicyGlobal.Count) Global Teams Meeting policy" | ||
|
|
||
| } catch { | ||
| Write-Verbose "Session is not established, run Connect-MicrosoftTeams before requesting access token" | ||
| } | ||
| } | ||
|
|
||
| Describe "Teams Meeting policies" -Tag "Maester", "Teams", "MeetingPolicy" { | ||
|
|
||
|
|
||
| It "Configure which users are allowed to present in Teams meetings" -Tag "AllowParticipantGiveRequestControl" { | ||
|
|
||
| $portalLink_MeetingPolicy = "https://admin.teams.microsoft.com/policies/meetings" | ||
|
|
||
| if (!(Test-MtConnection Teams)) { | ||
| Add-MtTestResultDetail -SkippedBecause NotConnectedTeams | ||
| return $null | ||
| } | ||
|
|
||
| $result = $TeamsMeetingPolicyGlobal.AllowParticipantGiveRequestControl | ||
|
|
||
| if ($result -eq $false) { | ||
| $testResultMarkdown = "Well done. AllowParticipantGiveRequestControl is $($result)`n`n" | ||
| } else { | ||
| $testResultMarkdown = "AllowParticipantGiveRequestControl in [Meeting policies]($portalLink_MeetingPolicy) should be False and is $($result) `n`n" | ||
| } | ||
| $testDetailsMarkdown = "Only allow users with presenter rights to share content during meetings. Restricting who can present limits meeting disruptions and reduces the risk of unwanted or inappropriate content being shared." | ||
| Add-MtTestResultDetail -Description $testDetailsMarkdown -Result $testResultMarkdown | ||
|
|
||
| $result | Should -Be $false -Because "AllowParticipantGiveRequestControl should be False" | ||
| } | ||
|
|
||
| It "Only invited users should be automatically admitted to Teams meetings" -Tag "AutoAdmittedUsers" { | ||
| #($TeamsMeetingPolicyGlobal.AutoAdmittedUsers -eq "InvitedUsers") | ||
|
|
||
| $portalLink_MeetingPolicy = "https://admin.teams.microsoft.com/policies/meetings" | ||
|
|
||
| if (!(Test-MtConnection Teams)) { | ||
| Add-MtTestResultDetail -SkippedBecause NotConnectedTeams | ||
| return $null | ||
| } | ||
|
|
||
| $result = $TeamsMeetingPolicyGlobal.AutoAdmittedUsers | ||
|
|
||
| if ($result -eq "InvitedUsers") { | ||
| $testResultMarkdown = "Well done. AutoAdmittedUsers is $($result)`n`n" | ||
| } else { | ||
| $testResultMarkdown = "AutoAdmittedUsers in [Meeting policies]($portalLink_MeetingPolicy) should be InvitedUsers and is $($result) `n`n" | ||
| } | ||
| $testDetailsMarkdown = "Users who aren’t invited to a meeting shouldn’t be let in automatically, because it increases the risk of data leaks, inappropriate content being shared, or malicious actors joining. If only invited users are automatically admitted, then users who weren’t invited will be sent to a meeting lobby. The host can then decide whether or not to let them in." | ||
| Add-MtTestResultDetail -Description $testDetailsMarkdown -Result $testResultMarkdown | ||
|
|
||
| $result | Should -Be "InvitedUsers" -Because "AutoAdmittedUsers should be InvitedUsers" | ||
| } | ||
|
|
||
| It "Restrict anonymous users from joining meetings" -Tag "AllowAnonymousUsersToJoinMeeting" { | ||
|
|
||
| $portalLink_MeetingPolicy = "https://admin.teams.microsoft.com/policies/meetings" | ||
|
|
||
| if (!(Test-MtConnection Teams)) { | ||
| Add-MtTestResultDetail -SkippedBecause NotConnectedTeams | ||
| return $null | ||
| } | ||
|
|
||
| $result = $TeamsMeetingPolicyGlobal.AllowAnonymousUsersToJoinMeeting | ||
|
|
||
| if ($result -eq $false) { | ||
| $testResultMarkdown = "Well done. AllowAnonymousUsersToJoinMeeting is $($result)`n`n" | ||
| } else { | ||
| $testResultMarkdown = "AllowAnonymousUsersToJoinMeeting in [Meeting policies]($portalLink_MeetingPolicy) should be False and is $($result) `n`n" | ||
| } | ||
| $testDetailsMarkdown = "By restricting anonymous users from joining Microsoft Teams meetings, you have full control over meeting access. Anonymous users may not be from your organization and could have joined for malicious purposes, such as gaining information about your organization through conversations." | ||
| Add-MtTestResultDetail -Description $testDetailsMarkdown -Result $testResultMarkdown | ||
|
|
||
| $result | Should -Be $false -Because "AllowAnonymousUsersToJoinMeeting should be False" | ||
| } | ||
|
|
||
| It "Restrict anonymous users from starting Teams meetings" -Tag "AllowAnonymousUsersToStartMeeting" { | ||
|
|
||
| $portalLink_MeetingPolicy = "https://admin.teams.microsoft.com/policies/meetings" | ||
|
|
||
| if (!(Test-MtConnection Teams)) { | ||
| Add-MtTestResultDetail -SkippedBecause NotConnectedTeams | ||
| return $null | ||
| } | ||
|
|
||
| $result = $TeamsMeetingPolicyGlobal.AllowAnonymousUsersToStartMeeting | ||
|
|
||
| if ($result -eq $false) { | ||
| $testResultMarkdown = "Well done. AllowAnonymousUsersToStartMeeting is $($result)`n`n" | ||
| } else { | ||
| $testResultMarkdown = "AllowAnonymousUsersToStartMeeting in [Meeting policies]($portalLink_MeetingPolicy) should be False and is $($result) `n`n" | ||
| } | ||
| $testDetailsMarkdown = "If anonymous users are allowed to start meetings, they can admit any users from the lobbies, authenticated or otherwise. Anonymous users haven’t been authenticated, which can increase the risk of data leakage." | ||
| Add-MtTestResultDetail -Description $testDetailsMarkdown -Result $testResultMarkdown | ||
|
|
||
| $result | Should -Be $false -Because "AllowAnonymousUsersToStartMeeting should be False" | ||
| } | ||
|
|
||
| It "Limit external participants from having control in a Teams meeting" -Tag "AllowExternalParticipantGiveRequestControl" { | ||
|
|
||
| $portalLink_MeetingPolicy = "https://admin.teams.microsoft.com/policies/meetings" | ||
|
|
||
| if (!(Test-MtConnection Teams)) { | ||
| Add-MtTestResultDetail -SkippedBecause NotConnectedTeams | ||
| return $null | ||
| } | ||
|
|
||
| $result = $TeamsMeetingPolicyGlobal.AllowExternalParticipantGiveRequestControl | ||
|
|
||
| if ($result -eq $false) { | ||
| $testResultMarkdown = "Well done. AllowExternalParticipantGiveRequestControl is $($result)`n`n" | ||
| } else { | ||
| $testResultMarkdown = "AllowExternalParticipantGiveRequestControl in [Meeting policies]($portalLink_MeetingPolicy) should be False and is $($result) `n`n" | ||
| } | ||
| $testDetailsMarkdown = "External participants are users that are outside your organization. Limiting their permission to share content, add new users, and more protects your organization’s information from data leaks, inappropriate content being shared, or malicious actors joining the meeting." | ||
| Add-MtTestResultDetail -Description $testDetailsMarkdown -Result $testResultMarkdown | ||
|
|
||
| $result | Should -Be $false -Because "AllowExternalParticipantGiveRequestControl should be False" | ||
| } | ||
|
|
||
| It "Restrict dial-in users from bypassing a meeting lobby " -Tag "AllowPSTNUsersToBypassLobby" { | ||
|
|
||
| $portalLink_MeetingPolicy = "https://admin.teams.microsoft.com/policies/meetings" | ||
|
|
||
| if (!(Test-MtConnection Teams)) { | ||
| Add-MtTestResultDetail -SkippedBecause NotConnectedTeams | ||
| return $null | ||
| } | ||
|
|
||
| $result = $TeamsMeetingPolicyGlobal.AllowPSTNUsersToBypassLobby | ||
|
|
||
| if ($result -eq $false) { | ||
| $testResultMarkdown = "Well done. AllowPSTNUsersToBypassLobby is $($result)`n`n" | ||
| } else { | ||
| $testResultMarkdown = "AllowPSTNUsersToBypassLobby in [Meeting policies]($portalLink_MeetingPolicy) should be False and is $($result) `n`n" | ||
| } | ||
| $testDetailsMarkdown = "Dial-in users aren’t authenticated though the Teams app. Increase the security of your meetings by preventing these unknown users from bypassing the lobby and immediately joining the meeting." | ||
| Add-MtTestResultDetail -Description $testDetailsMarkdown -Result $testResultMarkdown | ||
|
|
||
| $result | Should -Be $false -Because "AllowPSTNUsersToBypassLobby should be False" | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters