Details

This policy setting prohibits access to Windows Connect Now (WCN) wizards.

The recommended state for this setting is: Enabled.

Rationale:

Allowing standard users to access the Windows Connect Now wizard increases the risk and attack surface.

Impact:

The WCN wizards are turned off and users have no access to any of the wizard tasks. All the configuration related tasks including ‘Set up a wireless router or access point’ and ‘Add a wireless device’ are disabled.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled:

Computer ConfigurationPoliciesAdministrative TemplatesNetworkWindows Connect NowProhibit access of the Windows Connect Now wizards

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template WindowsConnectNow.admx/adml that is included with the Microsoft Windows 8.0 & Server 2012 (non-R2) Administrative Templates (or newer).

Default Value:

Disabled. (Users can access all WCN wizard tasks.)

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/3345

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management, Identification and Authentication.This control applies to the following type of system Windows.

References

• 800-53|CM-1
• 800-53|CM-2
• 800-53|CM-6
• 800-53|CM-7
• 800-53|IA-5
• CSCv7|9.2

Source

• Tenable.com/audits