Details
This policy setting prohibits access to Windows Connect Now (WCN) wizards.
The recommended state for this setting is: Enabled.
Rationale:
Allowing standard users to access the Windows Connect Now wizard increases the risk and attack surface.
Solution
To establish the recommended configuration via GP, set the following UI path to Enabled:
Computer ConfigurationPoliciesAdministrative TemplatesNetworkWindows Connect NowProhibit access of the Windows Connect Now wizards
Note: This Group Policy path may not exist by default. It is provided by the Group Policy template WindowsConnectNow.admx/adml that is included with the Microsoft Windows 8.0 & Server 2012 (non-R2) Administrative Templates (or newer).
Impact:
The WCN wizards are turned off and users have no access to any of the wizard tasks. All the configuration related tasks including ‘Set up a wireless router or access point’ and ‘Add a wireless device’ are disabled.
Default Value:
Disabled. (Users can access all WCN wizard tasks.)
References:
CCE-36109-7
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Windows.