Detections
Analytics

18.6.20.2 Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting prohibits access to Windows Connect Now (WCN) wizards.

The recommended state for this setting is: Enabled.

Allowing standard users to access the Windows Connect Now wizard increases the risk and attack surface. Additionally, according to Microsoft, Windows Connect Now was created as a solution for home networking and small businesses and is not intended for enterprise scenarios.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled :

Computer Configuration\Policies\Administrative Templates\Network\Windows Connect Now\Prohibit access of the Windows Connect Now wizards

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template WindowsConnectNow.admx/adml that is included with the Microsoft Windows 8.0 & Server 2012 (non-R2) Administrative Templates (or newer).

Impact:

The WCN wizards are turned off and users have no access to any of the wizard tasks. All the configuration related tasks including 'Set up a wireless router or access point' and 'Add a wireless device' are disabled.

See Also

https://workbench.cisecurity.org/benchmarks/25708

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Windows

Control ID: 8583548aa2467bec62a4408fac597fa692937981eae37fbe570759fbb71976ad