Information
Allows UPnP devices to be hosted on this computer.
The recommended state for this setting is: 'Disabled'.
Rationale:
Universal Plug n Play (UPnP) is a real security risk - it allows automatic discovery and attachment to network devices.
Notes that UPnP is different than regular Plug n Play (PnP).
Workstations should not be advertising their services (or automatically discovering and connecting to networked services) in a security-conscious enterprise managed environment.
Solution
To establish the recommended configuration via GP, set the following UI path to: 'Disabled'.
Computer Configuration\Policies\Windows Settings\Security Settings\System Services\UPnP Device Host
Impact:
Any hosted UPnP devices will stop functioning and no additional hosted devices can be added.