Commands › Microsoft Teams
New-CsTeamsEnhancedEncryptionPolicy
Use this cmdlet to create a new Teams enhanced encryption policy.
Quick start script
# New-CsTeamsEnhancedEncryptionPolicy — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-MicrosoftTeams -CertificateThumbprint $thumb -ApplicationId $appId -TenantId $tenantId
# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-CsTeamsEnhancedEncryptionPolicy
$before | Format-List
# 3. Make the change (dry run first)
New-CsTeamsEnhancedEncryptionPolicy -WhatIf
New-CsTeamsEnhancedEncryptionPolicy
# 4. Verify and diff
$after = Get-CsTeamsEnhancedEncryptionPolicy
Compare-Object ($before | Out-String) ($after | Out-String)Syntax
New-CsTeamsEnhancedEncryptionPolicy [-Description <Object>] [-CallingEndtoEndEncryptionEnabledType <Object>] [-MeetingEndToEndEncryption <Object>]
[[-Identity] <Object>] [-InMemory] [-Force] [-WhatIf] [-Confirm] [<CommonParameters>]Parameters (8)
| Parameter | Type | Required | What it controls |
|---|---|---|---|
| -CallingEndtoEndEncryptionEnabledType | Enum | Determines whether end-to-end encrypted calling is available for the user in Teams. Set this to DisabledUserOverride to allow user to turn on end-to-end encrypted calls. Set this to Disabled to prohibit. | |
| -Confirm | SwitchParameter | Prompts you for confirmation before running the cmdlet. | |
| -Description | String | Enables administrators to provide explanatory text to accompany a Teams enhanced encryption policy. | |
| -Force | SwitchParameter | Suppresses all non-fatal errors. | |
| -Identity | XdsIdentity | Unique identifier assigned to the Teams enhanced encryption policy. | |
| -InMemory | SwitchParameter | Creates an object reference without actually committing the object as a permanent change. If you assign the output of this cmdlet called with this parameter to a variable, you can make changes to the properties of... | |
| -MeetingEndToEndEncryption | Enum | Determines whether end-to-end encrypted meetings are available in Teams ([requires a Teams Premium license](https://www.microsoft.com/en-us/microsoft-teams/premium)). Set this to DisabledUserOverride to allow users... | |
| -WhatIf | SwitchParameter | Shows what would happen if the cmdlet runs. The cmdlet is not run. |
Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.