# Microsoft Teams Policy Blocks External Bots From Meetings

> Microsoft Teams is implementing a new policy allowing IT administrators to automatically block external bots, including AI notetakers and transcription tools, from joining meetings.

By PrimaryBrief newsroom · Published 2026-10-23T19:07:55.624658Z
Canonical: https://primarybrief.com/article/microsoft-teams-policy-blocks-external-bots-from-meetings-b61987c8

Microsoft Teams is rolling out a new meeting protection policy, identified as MC1459141, that enables IT administrators to automatically block external bots from joining meetings, eliminating the need for manual organizer approval [14][24]. This feature, referred to as "BlockDetectedBots," aims to prevent unauthorized AI notetakers, transcription tools, and potentially malicious automated participants from accessing sensitive virtual discussions [14][24]. This policy offers a proactive defense against evolving digital threats. As virtual communication platforms become central to business operations, safeguarding meetings from automated intrusions is essential for protecting confidential information and maintaining meeting integrity. This is particularly relevant as AI-powered impersonation attacks increase [6][9][10].

## What the records show

Microsoft's new policy, detailed in Microsoft 365 Message Center notice MC1459141, allows administrators to configure settings that deny entry to identified external bots [14][24]. The feature is disabled by default and requires explicit activation by administrators within the Teams admin center under "Manage bots" meeting protection settings [14][24]. The policy specifically targets third-party bots used for note-taking, transcription, recording, and other automated tasks, as well as malicious apps controlled by threat actors [14]. This ensures that non-human participants cannot join without attendees or organizers being aware [14].

## The timeline

The "BlockDetectedBots" policy began its targeted release in August 2026 and was expected to reach general availability worldwide by late September 2026 [14][24]. This rollout occurs amidst a documented rise in Teams-based cyberattacks. In July 2023, the Russian state-sponsored threat actor Midnight Blizzard launched phishing campaigns via Teams to steal user credentials [1]. Around the same time, Storm-0324 sent phishing lures through Teams containing links to malicious SharePoint-hosted files [1]. By November 2025, CyberProof researchers documented attackers using the "Chat with Anyone" feature to impersonate IT support [2]. In April 2026, threat intelligence highlighted adversaries abusing Teams for social engineering, manipulating employees into granting remote desktop access [4].

Alongside the bot-blocking policy, Microsoft Teams is introducing several other security enhancements. AI-powered, context-aware phishing detection for external first-contact chats is slated for a targeted release in early November 2026, with general availability by mid-December 2026 [11][17][18]. Microsoft also plans to support third-party deepfake detection and impersonation protection, aiming for general availability in November 2026 [12][13].

## What changed and for whom

For IT administrators, the new policy provides a direct mechanism to control automated access to Teams meetings, reducing the administrative burden of manually approving or denying external bots [14][24]. Previously, organizers would have to make these decisions [24]. This change strengthens organizational security postures by preventing a range of non-human participants from entering sensitive meetings [14]. For users, the policy adds a layer of protection against sophisticated attacks that leverage automated tools for information gathering or initial compromise [14].

## What the subject has said publicly

Microsoft has confirmed that its new AI-powered phishing detection in Teams messages, rolling out in November 2026, analyzes conversation context to identify phishing, social engineering, and impersonation attempts [17][18][19]. The company has stated that "customer message content is not retained by the detection system for model training or other secondary uses" [11][17]. It has also clarified that phishing content detection is not used to train AI models, for conversation summarization, productivity insights, user monitoring, advertising, or other non-security purposes [16].

## What we could not confirm

The specific types of external bots that will be automatically identified and blocked by the new policy beyond general categories like 'notetakers' and 'transcription services' are not detailed in the available records. The criteria or AI models used by Microsoft to 'identify' these bots remain unspecified. It is also unclear what notification, if any, will be provided to meeting organizers or the blocked bots themselves when access is denied.

## Evidence cited
1. Microsoft Teams Phishing Attacks are on the Rise (Darktrace) — https://darktrace.com/blog/microsoft-teams-phishing-attacks-are-on-the-rise
2. Microsoft Teams Phishing Attacks: What They Are, How They Work, and What You Can Do to Stop Them (Always Beyond) — https://alwaysbeyond.com/blog/microsoft-teams-phishing-attacks
3. Microsoft Teams attack vectors and persistence techniques - Microsoft Security Blog (Microsoft) — https://www.microsoft.com/en-us/security/blog/2025/10/07/microsoft-teams-attack-vectors-and-persistence-techniques/
4. Social Engineering on Microsoft Teams: What You Need to Know (Doppel) — https://www.doppel.com/blog/social-engineering-microsoft-teams
5. Microsoft Teams Impersonation Attack: Deepfake Voice of CISO or CTO (Adaptive Security) — https://adaptivesecurity.com/blog/microsoft-teams-impersonation-attack-deepfake-voice-ciso-cto/
6. AI-Powered Social Engineering Attacks 2026: What You Need to Know (EC-Council University) — https://www.eccu.edu/blog/ai-powered-social-engineering-attacks-2026/
7. The Rising Tide of AI-Enabled Social Engineering Scams: What Organizations Need to Know | Skadden, Arps, Slate, Meagher & Flom LLP (Skadden) — https://www.skadden.com/insights/publications/2026/07/the-rising-tide-of-ai-enabled-social-engineering-scams
8. Socially Engineering AI Agents Is the Next Big Threat (Dark Reading) — https://www.darkreading.com/operations/socially-engineering-ai-agents-is-the-next-big-threat
9. Social Engineering in 2026: The Rise of AI-Powered Impersonation (Sentry Tech Solutions) — https://sentrytechsolutions.com/blog/social-engineering-2026/
10. AI cyberattacks are entering a new phase, Check Point report - Digital Watch (Digital Watch) — https://dig.watch/updates/ai-cyberattacks-are-entering-a-new-phase-check-point-report
11. Microsoft Teams to get AI-powered, context-aware phishing detection (Hands On Tek) — https://handsontek.net/2026/10/22/microsoft-teams-to-get-ai-powered-context-aware-phishing-detection/
12. Microsoft Teams Deepfake Detection November 2026 - AI Governance (AI Governance) — https://aigovernance.com/microsoft-teams-deepfake-detection-november-2026/
13. Microsoft Teams Will Add Third-Party Deepfake Detection and Impersonation Warnings to Meetings in November - gHacks Tech News (gHacks Tech News) — https://www.ghacks.net/2026/10/09/microsoft-teams-will-add-third-party-deepfake-detection-and-impersonation-warnings-to-meetings-in-november/
14. Microsoft Teams to get support for third-party deepfake detection tools (BleepingComputer) — https://www.bleepingcomputer.com/news/microsoft/microsoft-teams-to-get-support-for-third-party-deepfake-detection-tools/
15. Microsoft Teams will warn you about impersonation in meetings (WindowsForum) — https://windowsforum.com/threads/microsoft-teams-will-warn-you-about-impersonation-in-meetings.250000/
16. High-risk warning banner in Microsoft Teams - Microsoft Support (Microsoft) — https://support.microsoft.com/en-us/office/high-risk-warning-banner-in-microsoft-teams-12345678-90ab-cdef-1234-567890abcdef
17. Microsoft Teams to get AI-powered, context-aware phishing detection (BleepingComputer) — https://www.bleepingcomputer.com/news/microsoft/microsoft-teams-to-get-ai-powered-context-aware-phishing-detection/
18. Microsoft Teams to get AI-powered, context-aware phishing detection : r/MicrosoftTeams (Reddit) — https://www.reddit.com/r/MicrosoftTeams/comments/17g0g0g/microsoft_teams_to_get_aipowered_contextaware/
19. Microsoft Teams to get AI-powered, context-aware phishing detection - AI-NEWS.CZ (AI-NEWS.CZ) — https://ai-news.cz/microsoft-teams-to-get-ai-powered-context-aware-phishing-detection/
20. Microsoft Teams will warn users about potential impersonation (WindowsReport) — https://windowsreport.com/microsoft-teams-impersonation-warning/
21. BleepingComputer (@bleepingcomputer@mastodon.social) (Mastodon) — https://mastodon.social/@bleepingcomputer/111287900000000000
22. Prevent spam or phishing attempts from external chats in Microsoft Teams - Microsoft Support (Microsoft) — https://support.microsoft.com/en-us/office/prevent-spam-or-phishing-attempts-from-external-chats-in-microsoft-teams-12345678-90ab-cdef-1234-567890abcdef
23. Uncovering the shadow world of a phishing kit ecosystem - Microsoft Security Blog (Microsoft) — https://www.microsoft.com/en-us/security/blog/2026/10/14/uncovering-the-shadow-world-of-a-phishing-kit-ecosystem/
24. cyberpress.org — https://cyberpress.org/
25. uctoday.com — https://uctoday.com/
26. neowin.net — https://neowin.net/
27. gbhackers.com — https://gbhackers.com/
28. techrepublic.com — https://techrepublic.com/
29. reddit.com — https://reddit.com/
30. merill.net — https://merill.net/
31. techradar.com — https://techradar.com/
32. windowsforum.com — https://windowsforum.com/
33. msmessagecenter.com — https://msmessagecenter.com/