The network selection user interface (UI) must not be displayed on the logon screen.

STIG ID: WN10-CC-000120 |  SRG: SRG-OS-000095-GPOS-00049 |  Severity: medium |  CCI:  | Vulnerability Id: V-220819

Vulnerability Discussion

Enabling interaction with the network selection UI allows users to change connections to available networks without signing into Windows.

Check

Configure the policy value for Computer Configuration >> Administrative Templates >> System >> Logon >> "Do not display network selection UI" to "Enabled".

Fix

If the following registry value does not exist or is not configured as specified, this is a finding.

Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \SOFTWARE\Policies\Microsoft\Windows\System\

Value Name: DontDisplayNetworkSelectionUI

Value Type: REG_DWORD
Value: 1