Microsoft Teams’ New Feature Blocks Bots from Joining Meetings

Microsoft has rolled out a new bot protection capability in Microsoft Teams that gives IT administrators and meeting organizers greater control over external bots attempting to join meetings, a move designed to address growing privacy and security concerns around AI-powered meeting tools.

As AI note-taking bots have become increasingly embedded in the workplace, a parallel problem has emerged: bots joining meetings without participants’ knowledge or intent.

Users integrating third-party services have reported that the associated bots continue to auto-join future meetings, creating unintended surveillance risks, particularly during discussions involving sensitive or confidential information.

Recently, Microsoft has rolled out a new workplace presence feature in Microsoft Teams that automatically updates a user’s work location when they connect to their organization’s Wi-Fi network.

New Admin Policy in Teams Admin Center

Microsoft has introduced a dedicated admin policy, “Manage external bots and their access to meetings,” now available in the Teams Admin Center. The policy can be assigned granularly to individual users or specific groups. Admins have two configuration options:

• When detected, require approval before joining (default): Teams detects bots, routes them to the meeting lobby, and requires explicit organizer confirmation before they are admitted.
• Do not detect bots: Disables the detection experience entirely.

Bot detection is enabled by default for all tenants, meaning organizations receive baseline protection without requiring any manual configuration.

Microsoft has enhanced Teams’ ability to differentiate bots from human participants by leveraging a combination of behavioral and infrastructure signals to improve detection accuracy.

In parallel, Microsoft is rolling out a Teams Bot Identification Program, a registration pathway for Independent Software Vendors (ISVs) that build meeting experiences on Teams.

Registered bot providers can embed a self-identification marker in their join requests, which Teams can recognize and classify the bot as a known, verified participant rather than a suspected threat.

When the policy is active, detected bots are placed in the meeting lobby and visually distinguished from human attendees. Participants waiting in the lobby are now organized into two distinct categories visible to organizers:

• Waiting — Verified participants and registered bots
• Suspected Threats — Unregistered or system-flagged bots

This lobby segmentation enables organizers to quickly triage who is waiting to join and identify potential risks at a glance, eliminating the need to manually scan a full participant list.

Microsoft has also implemented deliberate friction points to prevent accidental bot admissions. There is no one-click Admit option available for identified bots. Organizers receive confirmation prompts when admitting participants that include bots, and warning dialogs appear when selecting Admit All if bots are included in the queue.

This new bot protection framework also marks the retirement of Teams’ existing CAPTCHA verification system, with the CAPTCHA policy set to be fully removed from the Teams Admin Center by late August 2026.

Microsoft has indicated it will continue expanding the bot management ecosystem, with upcoming capabilities including:

• Allow lists for pre-approved bots
• Organization-wide policies to block all external bots
• Admin audit logs and detection reports
• Granular controls aligned to varied security postures

The feature reached general availability globally in early-to-mid June 2026, with GCC environments receiving the rollout on the same timeline.

Microsoft recommends setting the meeting option “Who can admit from lobby” to organizers and co-organizers only, ensuring that no unintended participant can inadvertently admit a bot on behalf of the meeting host.

 Strengthen Your SOC by Accelerating Threat Detection & Rapid Investigations. -> Integrate ANY.RUN With Your SOC Now.

The post Microsoft Teams’ New Feature Blocks Bots from Joining Meetings appeared first on Cyber Security News.