3476077b-5d03-4819-9ef0-213402f37eed
Enabling interaction with the network selection UI allows users to change connections to available networks without signing into Windows. There are several attacks based on this.
To fix this configure the policy value for
Computer Configuration
|_ Administrative Templates
|_ System
|_ Logon
|_ "Do not display network selection UI" to "Enabled".
STIG:
Server:
2016: https://www.stigviewer.com/stig/microsoft_windows_server_2016/2023-08-22/finding/V-224928 / https://www.stigviewer.com/stig/windows_server_2016/2020-06-16/finding/V-73531
2019: https://www.stigviewer.com/stig/microsoft_windows_server_2019/2023-09-11/finding/V-205690 / https://www.stigviewer.com/stig/windows_server_2019/2020-06-15/finding/V-93407
2022: https://www.stigviewer.com/stig/microsoft_windows_server_2022/2023-09-11/finding/V-254348
Desktop:
W10: https://www.stigviewer.com/stig/microsoft_windows_10/2023-09-29/finding/V-220819 / https://www.stigviewer.com/stig/windows_10/2021-08-18/finding/V-220819
W11: https://www.stigviewer.com/stig/microsoft_windows_11/2023-09-29/finding/V-253378
NIST 800-53 CM-1, CM-2, CM-6, CM-7, CM-7(1), CM-9, SA-3, SA-8, SA-10
NIST 800-171: 3.4.1[a], 3.4.1[b], 3.4.1[c], 3.4.2[a], 3.4.2[b]
CMMCv2: CM.L2-3.4.2
CSCv7: 5.1