This policy setting allows you to control whether anyone can interact with available networks UI on the logon screen. If you enable this policy setting, the PCs network connectivity state cannot be changed without signing into Windows. If you disable or dont configure this policy setting, any user can disconnect the PC from the network or can connect the PC to other available networks without signing into Windows. Counter Measure: Enable and configure this setting. Potential Impact: Users will need to log on to Windows with their device each time they want to disconnect from the current network or connect to another one. Fix: (1) GPO: Computer Configuration\Administrative Templates\System\Logon\Do not display network selection UI (2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System!DontDisplayNetworkSelectionUI