Overview

You can restrict all users from joining meetings outside your organization, or restrict access to certain in-meeting features to make sure that users follow your organization's policies. When users try to use a disabled feature, an indicator appears to let them know about the restriction set by the organization.


 
Collaboration restrictions only support Webex Meetings and Webex Webinars. These restrictions don't apply to Webex Events (classic), Webex Training, and Webex Support.

Users can bypass these restrictions by joining external meetings with their personal email addresses, or as guests. To avoid users bypassing these restrictions, follow the steps in Restrict Collaboration Features for Windows, Mac, Android, and iOS devices to add a token to company devices to make sure that accounts used with the devices follow the restrictions set by your organization.

Collaboration restrictions at a group or user level

If you want to set up policies for specific groups or on a per user basis instead of the whole organization, you can do so by creating meetings settings templates.

Allow or block external users from joining meetings in your organization

You can allow or block users outside of your organization from joining meetings hosted by users in your organization.

1

Sign in to Control Hub, then under Meeting, click Settings.

2

Under Internal Webex Meetings, select one of the following:

  • Allow users to join meetings in my organization—Users outside of your organization can join meetings hosted by users in your organization.
  • Allow external users to join meetings from approved email domains in my organization—Users with email domains that you approved can join meetings hosted by users in your organization.
  • Block external users to join meetings in my organization—Users outside of your organization can't join meetings hosted by users in your organization.
3

If you selected Allow external users to join meetings from approved email domains in my organization, enter an email domain and click Add.

Block users from joining external meetings in Control Hub

These settings only apply to users who are on the Webex Meetings client version 42.3 or higher.

When you block users from joining external meetings, they can't join meetings that are hosted from Webex sites outside of your organization. But you can allow users to join meetings on certain Webex sites, by adding those Webex sites to an approved list setting.

New behavior changes

Previously, you could allow users to join external meetings and any collaboration features that you restricted would still work. For example, if you restricted chat during meetings, users could still use the chat panel in external meetings that were in the approved list.

This behavior has now changed with a recent update. The approved list is now a list of sites that users can join external meetings in with the collaboration restrictions that you set. For example, if you restricted chat, then users won't be able to use the chat panel in external meetings.

1

Sign in to Control Hub, then under Meeting, click Settings.

2

Under External meetings, select one of the following:

  • Allow users to join all external meetings—Users are allowed to join all external meetings.
  • Allow users to join approved external meetings—Users can only join external meetings from approved Webex sites.
  • Block users from joining all external meetings—Users aren't allowed to join external meetings from any Webex site.
3

If you selected Allow users to join approved external meetings, enter a Webex site and click Add.

What to do next

If you allow users to join external meetings, you can select which collaboration features users have available to them during external meetings.

Restrict collaboration features in Webex Meetings

These settings apply only to users who join meetings that aren't hosted by someone in their organization. If you want to restrict in-meeting features for meetings within your organization, then you can create and use a custom session type or meeting settings template. Session types and meeting settings templates support internal meeting policies.

1

Sign in to Control Hub, then under Meeting, click Settings.

2

Toggle the features you want to enable or disable for users during external meetings:

Breakout sessions

  • Broadcast messages—Users have access to broadcast messages.

Collaboration tools

In meeting

  • Chat—Users have access to the chat panel.
  • Closed captioning—Users can turn on automated closed captions.
  • File transfer—Users can upload files for other participants to download during meetings.
  • Participant list—Users can see the participant list.
  • Take presenter—Users can ask to take the presenter role.
  • Notes—Users can take notes.
  • Webex Assistant—Users have access to Webex Assistant.

Recording

Remote control

  • Enable remote control—Users can remotely control another computer during the meeting, and allow anyone to remotely control their computers. Applies to 42.1 and later.
    • Application remote control—Users can remotely control another computer's applications.
    • Desktop remote control—Users can remotely control another computer's desktop.
    • Web browser remote control—Users can remotely control another computer's web browser.

Sharing

  • Enable sharing—Allow users to share their screen. Toggle this and/or the following sharing features off to increase security.
    • Application sharing—Users can share their application screen.
    • Desktop sharing—Users can share their desktop screen.
    • File and whiteboard sharing—Users can share their file and whiteboard screen.
    • Web browser sharing—Users can share their web browser screen.
    • Camera—Users can share video from their camera so participants see what their camera sees.

Telephony

  • VoIP—Allow host and participants to use VoIP.

Video

  • Turn on video—Allow participants to turn on video.
    • Standard definition (360p)—User's video can only stream up to 360p.
    • High definition (720p)——User's video can stream up to 720p.

Restrict collaboration features for Windows, Mac, Android, and iOS devices

If you want to restrict these collaboration settings devices in your organization, you can edit the system files so that those settings apply to anyone who uses the device to join a meeting outside your organization.

To do this, you have to first find and copy your organization ID in Control Hub. After getting the organization ID, follow the steps that apply to the devices that you want to edit.


 

Make sure to lock the organization ID in the registry so users can't change it themselves. If users change the organization ID, then the collaboration restrictions won't apply to their devices.

1

Sign in to Control Hub, then select Account.

2

Click the Copy icon in the Organization ID field.

What to do next

Now that you have your organization ID, choose one of the following methods to edit the devices.

You can choose from three options to set up collaboration feature restrictions for Windows devices:

  • Configure using registry keys—You can manually edit specific devices by adding the organization ID to one of these registry values:

    • HKEY_CURRENT_USER\SOFTWARE\Policies\CiscoWebex\OrganizationID

    • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\CiscoWebex\OrganizationID

  • Configure using a Group Policy template—You can import a Group Policy administrative template (.adm) to apply the organization ID to the same registry values as above.

  • Configure using an MSI Installation—You can run a command to install webexapp.msi using the organization ID to edit this registry value: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Webex\Policies\OrganizationID .

Configure using registry keys

  1. Open the Registry Editor.

  2. Add the organization ID to one of the following registry values:

    • HKEY_CURRENT_USER\SOFTWARE\Policies\CiscoWebex\OrganizationID

    • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\CiscoWebex\OrganizationID

Configure using a Group Policy template

  1. Import an .adm file.

  2. In a group policy management tool, click either:

    • Computer Configuration to apply the organization ID to HKEY_CURRENT_USER\SOFTWARE\Policies\CiscoWebex\OrganizationID

    • User Configuration to apply the organization to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\CiscoWebex\OrganizationID

  3. In the navigation panel, click Administrative Templates > Classic Administrative Templates (ADM) > Cisco WebEx Meetings > Cisco WebEx Meetings General Settings.

  4. Double-click Configure Organization ID in Cisco Webex.

  5. Click Enabled, add your organization ID in the Options box, and then click Apply.

Configure using an MSI installation

  1. Run the following command to install webexapp.msi with the ORGANIZATIONID parameter to configure HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Webex\Policies\OrganizationID:

    msiexec /i webexapp.msi /log webexapp.log ORGANIZATIONID="%ReplaceWithYourOrganizaitonId%"  /*For example:*/msiexec /i webexapp.msi /log webexapp.log ORGANIZATIONID="ab1c2d34-56e7-89f0-g123-h4567ijkl890"

To set up collaboration restrictions on Mac devices, create a .plist file named com.cisco.webexmeetings.config.plist under /Library/Preferences/, and add the following key to the file:

Key name

Value

Description

OrganizationID

%OrganizationID%

Specify the organization ID that you copied from Control Hub for the collaboration restrictions.

To set up collaboration restrictions on Android and iOS mobile devices, you have to configure the organization ID using the Mobile Device Management AppConfig service.


 

This feature works only for mobile devices that use the Webex Meetings app on version 41.7 and later.

Configuration key

Value type

Description

OrganizationID

String

Specify the organization ID that you copied from Control Hub for the collaboration restrictions.

To have your organization's policies apply to users who join from Google Chrome, you must add the Webex Meetings Policy plugin downloaded from the Chrome Web Store and then add a rule for your organization to the policy.

Users who are restricted from joining certain meetings will see the following message when they try to join a restricted meeting through Google Chrome.

1

Open Google Chrome's IT admin page at https://admin.google.com

2

Add the Webex Meetings Policy plugin extension by going to Chrome > Apps & extensions > Users & browsers > Add Chrome app or extension by ID.

3

Add the following extension by ID: denhmfenjcamjiamkogegcjieeiahjgp.

4

Add the following rule to the policy:

{

"orgID": {

"Value": "31b45abd-7528-46f6-8a8c-cf8c3514430b"

}

}

5

Right-click the tab and select Force install.

Known issues

Known issues for Webex Webinars in webcast view

  • Users will receive an invitation link to scheduled webcasts with Chat, Q & A, and Polling enabled even if those features have been restricted.
  • Attendees will have access to Chat, Q & A, and Polling features even if those features have been restricted.
  • Authenticated sign-in isn't supported. Attendees can still join webcasts without having to sign in.

Known issues for Webex Assistant for Meetings

If a meeting has Closed Captioning and Webex Assistant enabled, users with those two features disabled can't turn both of them off during the meeting if they're given the host role.

Known issues for Webex devices

  • Users on Mac devices can grab the presenter role from users on Webex devices even if the Take presenter feature have been disabled.
  • Users with the Annotation feature disabled will still see annotations when they use Webex devices to join meetings.

Known issues with older client versions

We recommend that you upgrade the Webex Meetings client to the last version (WBS 42.7 or above) or at least to the latest lockdown version (WBS42.6) so users get the best experience with collaboration features. If users are on an older client version (such as WBS 42.3 or lower), some collaboration features may not be available or may work incorrectly.

Known issues with restricting Annotation and File and whiteboarding sharing features

When Annotation is restricted, but File and whiteboarding sharing isn't, users can still see annotations if the presenter shares a whiteboard and starts annotating.