Microsoft Windows 11 Security Technical Implementation Guide

The Microsoft Windows 11 Security Technical Implementation Guide (V2 R11) has 257 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

257STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R11

CurrentPublished Wed Sep 30 2026

All Wi-Fi Direct adapters must be disabled on the system.

Microsoft Windows 11 Security Technical Implementation Guide

Assessment Title

Rule Text

All Wi-Fi Direct adapters must be disabled on the system.

Description

Discussion Text

Wi-Fi Direct establishes a peer-to-peer (P2P) connection that lacks robust authentication. Due to its vulnerability to several types of attacks (including SSID spoofing and unauthorized network bridge), there is potential for sensitive information to be compromised.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-288475

Rule

SV-288475r1256669_rule

Severity

medium

Rule Version

WN11-00-000400

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Determine whether any Wi-Fi Direct adapters exist on the system.
 
Open PowerShell with elevated privileges (run as administrator).
 
Enter the following command:

Get-NetAdapter -InterfaceDescription "Microsoft Wi-Fi Direct*" -IncludeHidden
 
If there are no Wi-Fi Direct adapters configured on the system, no adapter information will display. 
 
If any Wi-Fi Direct adapters are listed, this is a finding.

Implementation Procedure

Fix Text

Remove existing Wi-Fi Direct adapters from the system.
 
Open PowerShell with elevated privileges (run as administrator).
 
Enter the following command:

Get-NetAdapter -InterfaceDescription "Microsoft Wi-Fi Direct*" -IncludeHidden | Disable-NetAdapter -Confirm:$false".

STIG check 255 of 257 in the Microsoft Windows 11 STIG checklist

← Previous · V-279688Windows 11 systems must block consumer account user authentication.Next · V-288812 →Unused accounts must be disabled or removed from the system after 35 days of inactivity.