Detections
Analytics

18.5.20.2 Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting prohibits access to Windows Connect Now (WCN) wizards.

The recommended state for this setting is: 'Enabled'.

Rationale:
Allowing standard users to access the Windows Connect Now wizard increases the risk and attack surface.

Solution

To establish the recommended configuration via GP, set the following UI path to 'Enabled':


Computer Configuration\Policies\Administrative Templates\Network\Network\Windows Connect Now\Prohibit access of the Windows Connect Now wizards


Note: This Group Policy path may not exist by default. It is provided by the Group Policy template 'WindowsConnectNow.admx/adml' that is included with the Microsoft Windows 8.0 & Server 2012 (non-R2) Administrative Templates (or newer).

Impact:
The WCN wizards are turned off and users have no access to any of the wizard tasks. All the configuration related tasks including 'Set up a wireless router or access point' and 'Add a wireless device' are disabled.

See Also

https://workbench.cisecurity.org/files/1929

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, CSCv6|3.1, CSCv6|15.4

Plugin: Windows

Control ID: 547aebfc404005282720a187430d8578f555b993f90b9409e56c906886a20574