Keeping students safe while using Teams for distance learning

There are two roles available within Teams meetings: presenter and attendee. Presenters can manage meeting participants and share content, while the role of an attendee is more controlled. In many cases it is safest if students join meetings as attendees. This will ensure that they cannot remove other participants, mute others, or have other elevated meeting controls.

Educators can use the Who can present setting within Meeting options to control who joins their meetings as attendees, but administrators can also use the following policy to set the default value of this setting so that only the meeting organizer joins as a presenter and students join as attendees.

Apply this meeting policy to educators:

• Who can present: Only organizers and co-organizers

Requiring participants to sign in to Teams before they join a meeting is the first step to keeping unauthorized users from gaining access to a meeting. When a meeting participant is signed in, an educator can more easily identify the participant, which makes it easier to determine if they should be allowed into the meeting.

If you have provided your students and educators with Teams licenses and do not plan to allow participants to join meetings without signing in to Teams, ensure that the following meeting settingis set:

Anonymous users can join a meeting: Off

There may be cases where you want to allow anonymous users to join a meeting within your school or district. For example, you may be using Teams meetings for parent discussions, external consultations, or other cases.

If you choose to enable anonymous meetings, make sure your meeting organizers are using the proper meeting lobby settings and following meeting lobby best practices. Configure the following settings to ensure that anonymous participants are not automatically admitted into meetings.

Apply these meeting policy settings to meeting organizers:

• Let anonymous people and dial-in callers start a meeting: Off

• People dialing in can bypass the lobby: Off

• Who can bypass the lobby: Only organizers and co-organizers

Use these meeting policy settings to remove a student's ability to schedule meetings, create live events, and participate in private calls with faculty and other students.

Apply these meeting policy settings to students:

• Allow Meet now in channels: Off

• Allow the Outlook add-in:  Off

• Allow channel meeting scheduling:  Off

• Allow scheduling private meetings: Off

• Allow Meet now in private meetings: Off

Apply this live events policy to students:

• Allow scheduling: Off

Educators can use the meeting lobby bypassoptions to control who can enter meetings directly without needing to be admitted from the meeting lobby first. Limiting who has this capability will help educators keep unauthorized users from gaining access to their meetings.

Educators should set Who can bypass the lobby to Only me to ensure that only they, as meeting organizers, can join the meeting directly. This will ensure that students and any other participants will need to wait in the lobby until they are admitted to the meeting. This setting will also prevent students from joining the meeting unattended.

In addition to enabling the meeting lobby, educators should take steps to help prevent students from joining meetings unattended by following meeting lobby best practices. Ensure that the educators in your school or district are aware of the additional measures they can take to support student safety.

Use this meeting policy to set Who can bypass the lobby to Only me by default for educators.

Apply this meeting policy to educators:

• Automatically admit people: Organizer only

Apply this meeting policy to disable all meeting chats for students:

• Allow chat in meetings:  Disabled

Ensure that the educators in your environment are aware of the additional measures they can take to control student chat within channel meetings.

Use this meeting policy if you would like to stop students from uploading custom video backgrounds but would still like to allow students to blur their video background or choose a default Team image to use as their background.

UsePowerShell to assign this meeting policy to students:

• VideoFiltersMode: BlurandDefaultBackgrounds

Use this calling policy to disable all private calls and group calls for students.

Apply this calling policy to students:

• Make private calls:  Off

In Microsoft Teams, the Call me feature gives users a way to join the audio portion of a meeting by phone. Users get the audio portion of the meeting through their cell phone or land line and the content portion of the meeting—such as when another meeting participant shares their screen or plays a video—through their computer.

This feature is controlled at the organizer level. To prevent students from using this feature in class meetings, turn this Audio Conferencing setting off for educators organizing class meetings:

• Dial-out from meetings: Off

The Walkie Talkie app within Teams can provide educators with instant push-to-talk communication capabilities. Educators can use the app to connect quickly across campus without making voice calls or sending messages. Walkie Talkie also works anywhere with WiFi or cellular internet connectivity. While Walkie Talkie is a powerful tool for educators, it could be a distraction for students. Use this policy to disable Walkie Talkie access for students:

Apply this Teams app permissionpolicy to students:

• Microsoft apps: Block specific apps and allow all others.

• Select Walkie Talkie from the application list.

Each team within Microsoft Teams is associated with a Microsoft 365 group. To prevent students from creating teams, you must remove their ability to create a Microsoft 365 group by following these instructions.

Use this messaging policy to allow educators to delete any message sent within channel meetings and channel conversation that they own.

Apply this messaging policy to educators:

• Owners can delete sent messages:  On

Enable supervised chat and assign educators to chat supervisor roles so they can delete messages in chats or private meetings.

Deleted messages are still available for data loss prevention and other auditing purposes after they are deleted.

Educational institutions can use third party services such as Gaggle,Senso, or LightSpeed Systems to enable content monitoring within Teams.

Schools and universities can also use communication compliance,which is a solution in Microsoft 365 that helps minimize communication risks by helping you detect, capture, and act on inappropriate messages in your organization.

Use Supervised Chat if you would like educators to be present for all student chat conversations.

Use this policy if you would like to block students from sending Giphy content.

Apply this messaging policyto students:

• Use Giphys in conversations:  Off

Use this policy to set the appropriate Giphy content rating for students. Setting this policy with the following value will mean that students can insert Giphys in chats but will be strictly restricted from adult content.

Apply this messaging policy to students:

• Giphy content rating:  Strict

Use this policy to control if students can remove other users from group chats.

Apply this messaging policy to students:

• Remove users from group chats:  Off

Giving students the ability to remove and edit their own messages provides them with useful self-moderation tools, but if you are concerned about students abusing this capability, enable these settings to prevent students from removing or editing their sent messages.

Apply these messaging policy settings to students:

• Delete sent messages: Off

• Edit sent messages:  Off

Use this policy to disable private chat for students. If this policy is disabled, students will be unable to chat privately with educators and other students. Students can still use channels for communication, even when this is disabled.

Apply this messaging policy to students:

• Chat:  Off

Use this policy to disable private channel creation for students.

Apply this Teams policy to students:

• Create private channels: Off

External access is a way for Teams users from an external domain to find, call, chat, and set up meetings with you in Teams. You can also use external access to communicate with external users who are still using Skype for Business (online and on-premises) and Skype (in preview).

You may want to enable external access for educators in your institution so they can collaborate with colleagues outside of your tenant. Although you have enabled external access for your tenant, you can still disable this feature for students so they cannot be contacted by participants outside of your tenant boundaries.

Apply this policy to students:

• EnableFederationAccess: False

When you schedule a meeting in Teams for online lectures and classes, we recommend that you create those meetings in channels. Channels give you more robust controls within meetings, such as disabling student-to-student chat, providing an easier meeting set up process, and giving you the ability to track class discussions in context. 

As the meeting organizer, you should manage meeting options to increase your students' online safety. Learn more about the different ways you can access meeting options before and during meetings.

Use the meeting lobby bypass options to control who can enter your meeting directly without needing to be admitted from the meeting lobby first. Limiting who has this capability will help you keep unauthorized users from gaining access to your meetings.

Set Who can bypass the lobby to Only me to ensure that only you, as the meeting organizer, can join the meeting directly. This will ensure that your students and any other participants will need to wait in the lobby until you admit them into the meeting. This will stop students from joining the meeting unattended.

Set Always let callers bypass the lobby to No to ensure that anyone joining the meeting over the phone rather than using Teams will need to wait in the meeting lobby until you join the meeting and admit them.

There aretwo roles available within Teams meetings: presenter and attendee. Presenters control and manage meetings, while the role of an attendee is more controlled. In many cases it is safest if students join meetings as attendees. This will ensure that they cannot remove other participants, mute others, or have other elevated meeting controls. As attendees, students can still share video, participate in the meeting chat, and view shared files in the meeting.

Set Who can present to Only me to ensure that your students and other participants join as meeting attendees.

If you have another educator who should also join your class as a presenter, set Who can present to Specific people, then select the presenters you would like to add through the Select presenters for this meeting option.

Set Allow attendees to unmute to No to ensure that attendees join the meeting muted. This will also remove the attendees' ability to unmute themselves. You can mute and unmute students during your meeting by selecting More options next to Participants.

Learn more:Manage attendee audio permissions in Teams meetings.

Set Allow meeting chat to Disabled to make meeting chat read-only. No one can send messages in the chat, including the organizer. This prevents chats from being sent before, during, and after the meeting.

Set Allow meeting chat to In-meeting only to allow participants to send messages only during the meeting and allow organizers to send messages at any time.

If you need to change the setting during your meeting, select More actions > Meeting options.

Carefully review the list of participants who are waiting in the lobby. Only admit students and invited guests if you believe that they are authorized to join your meeting.

If you have another teacher or teaching assistant in the class, you can make them a presenter and ask them to monitor and admit students who joined late. If you delegate this task, ensure that your assistant is aware of who they should admit into the meeting.

If a participant is accidentally admitted to the meeting or is being disruptive, you can remove them from the meeting:

1. Click or tap Show participants in your call controls.

2. Right-click or tap and hold on the unauthorized participant.

3. Select Remove participant.

Ensure that your meeting lobby options are set correctly so that the participant is blocked from rejoining the meeting without entering the lobby first.

Let students know that you're muting their audio, then from the participants list, click Mute all.

You can also prevent students from unmuting themselves by ensuring they are attendees in the meeting. Then, select More options next to Participants >Don't allow attendees to unmute.

Learn more: Manage attendee audio permissions in Teams meetings.

If you're in a private meeting, use the instructions above to set up chatting controls before the meeting using Meeting options. During the meeting, control who can chat by selecting More actions > Meeting options.

If you are using channel meetings for your class and would like to block students from sending meetings chats at any time:

1. Navigate to the channel thread for your meeting

2. Tap the Format button to expand the compose box

3. Change Everyone can reply to You and moderators can reply.

This will allow team owners to post messages in the channel and meeting, but your students will be blocked from adding new messages.

If you see inappropriate messages in a channel meeting, you can right-click and delete the message if your IT administrator has granted you the correct permissions.

If you are using a channel meeting and a students is being disruptive within the meeting chat, you can mute the student for a time through your team settings.

If others need to present content during the meeting, whether the content is from a student or colleague, you can promote an attendee to presenter during the meeting.

1. Click or tap Show participants in your call controls.

2. Right-click or tap and hold on the person's name.

3. Select Make a presenter.

   Note: This grants the person full presenter rights, which allows them to share their screen, remove participants and more. Learn more about meeting roles.

4. When the person is done presenting, right-click or tap and hold on their name again and select Make an attendee.

If you would like to quickly change the attendee or presenter roles for everyone within the meeting, you can use the Who can present? setting in your Meeting options to do so. Changes to this setting take effect as soon as you make them, even when a meeting is in progress.

If you would like to block replies to specific announcement or channel conversation:

1. Navigate to the channel thread you would like to control.

2. Tap the Format button to expand the compose box.

3. Change Everyone can reply to You and moderators can reply.

This will allow team owners to post messages in the channel, but your students will be blocked from adding new messages.

Educators can turn on moderation for a class team channel to control who can start new posts and reply to posts in that channel.

In Teams, go to the channel, then select More options > Manage channel. From here you can turn on and turn off moderation, add class members as moderators, and set preferences.

To stop students from having the ability to post channel messages change Set channel moderation preferences to Only owners can post messages. This will control both channel and channel meeting posts.

If a students is being disruptive within a class team channel, you can mute the student for a time through your team settings.

Control who has the ability to @mention the team and whether or not students can use Giphy, stickers, or memes in channels.

1. Select More options on your team's tile, then Manage team.

2. Select Settings.

• To manage who can @mention the team or channel, select @mentions.

• To manage Giphys, stickers, and whether students can upload memes, select Fun stuff.

If your administrator has enabled supervised chat and has made you a chat supervisor, you will be able to delete inappropriate messages in chats or private meetings. To delete a message, hover over the message and select More options > Delete.

Deleted messages are still available for data loss prevention and other auditing purposes after they are deleted.