3.10.25.2 (L1) Ensure 'Do not display network selection UI' is set to 'Enabled'

Information

This policy setting allows you to control whether anyone can interact with available networks UI on the logon screen.

The recommended state for this setting is: Enabled

An unauthorized user could disconnect the PC from the network or can connect the PC to other available networks without signing into Windows.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Enabled

Administrative Templates\System\Logon\Do not display network selection UI

Impact:

The PC's network connectivity state cannot be changed without signing into Windows.

See Also

https://workbench.cisecurity.org/benchmarks/16852

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(10)

Plugin: Windows

Control ID: 7f32a61cde8ee43f8d7f7bd346e5231c86ee36b6f25de006cad2ad5135df22ec