← Back to Microsoft Windows Server 2025 Security Technical Implementation Guide

V-278017

CAT II (Medium)

Windows Server 2025 must not have Wi-Fi enabled unless required by the organization.

Rule ID

SV-278017r1256711_rule

STIG

Microsoft Windows Server 2025 Security Technical Implementation Guide

Version

V1R3

CCIs

CCI-000382

Discussion

Unnecessary connections could increase the attack surface of a system. Some of these services may not support required levels of authentication or encryption.

Check Content

Open PowerShell or a Command prompt.

Type " ipconfig /all".

Review the resulting display for existence of  a Wireless LAN or Wi-Fi connection.

If none are listed, issue the following command in PowerShell:

Get-NetAdapter | Where-Object PhysicalMediaType -eq "Native 802.11"	

Note: This command isolates the search to physical Wi-Fi adapters using the standard 802.11 wireless specification and does not rely on the adapter still having its default system name. 

If there is a Wi-Fi or Wireless LAN connection listed, this is a finding.

Fix Text

Validate the site documentation to ensure the approval of use for Wi-Fi server connections.

If the connection (s) have not been approved, go to "Settings" then "Network and Internet" and remove/disable the Wi-Fi adapter. Any Wi-Fi connections listed or in use must be documented and approved by the information system security officer (ISSO) or authorizing official (AO).