Detections
Analytics

18.6.20.1 Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting allows the configuration of wireless settings using Windows Connect Now (WCN). The WCN Registrar enables the discovery and configuration of devices over Ethernet (UPnP) over in-band 802.11 Wi-Fi through the Windows Portable Device API (WPD) and via USB Flash drives. Additional options are available to allow discovery and configuration over a specific medium.

The recommended state for this setting is: Disabled.

This setting enhances the security of the environment and reduces the overall risk exposure related to user configuration of wireless settings. Additionally, according to Microsoft, Windows Connect Now was created as a solution for home networking and small businesses and is not intended for enterprise scenarios.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled :

Computer Configuration\Policies\Administrative Templates\Network\Windows Connect Now\Configuration of wireless settings using Windows Connect Now

Note: This Group Policy path is provided by the Group Policy template WindowsConnectNow.admx/adml that is included with all versions of the Microsoft Windows Administrative Templates.

Impact:

WCN operations are disabled over all media.

See Also

https://workbench.cisecurity.org/benchmarks/25708

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|15.4, CSCv7|15.5

Plugin: Windows

Control ID: 6939628700149d88289973c21bbbf64e5a4a5efe55ec238145e172db4c96aad5