Microsoft Windows 10 Security Technical Implementation Guide

The Microsoft Windows 10 Security Technical Implementation Guide (V3 R6) has 267 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

267STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R6

CurrentPublished Mon Jan 05 2026

The system must notify the user when a Bluetooth device attempts to connect.

Microsoft Windows 10 Security Technical Implementation Guide

Assessment Title

Rule Text

The system must notify the user when a Bluetooth device attempts to connect.

Description

Discussion Text

If not configured properly, Bluetooth may allow rogue devices to communicate with a system. If a rogue device is paired with a system, there is potential for sensitive information to be compromised

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-220736

Rule

SV-220736r991589_rule

Severity

medium

Rule Version

WN10-00-000230

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

This is NA if the system does not have Bluetooth, or if Bluetooth is turned off per the organizations policy.

Search for "Bluetooth".
View Bluetooth Settings.
Select "More Bluetooth Options"
If "Alert me when a new Bluetooth device wants to connect" is not checked, this is a finding.

Implementation Procedure

Fix Text

Configure Bluetooth to notify users if devices attempt to connect.
View Bluetooth Settings.
Ensure "Alert me when a new Bluetooth device wants to connect" is checked.

STIG check 38 of 267 in the Microsoft Windows 10 STIG checklist

← Previous · V-220734Bluetooth must be turned off unless approved by the organization.Next · V-220737 →Administrative accounts must not be used with applications that access the Internet, such as web browsers, or with potential Internet sources, such as email.