Windows Server 2025 must not have Wi-Fi enabled unless required by the organization.

Unnecessary connections could increase the attack surface of a system. Some of these services may not support required levels of authentication or encryption.

Open PowerShell or a Command prompt.

Type " ipconfig /all".

Review the resulting display for existence of a Wireless LAN or Wi-Fi connection.

If none are listed, issue the following command in PowerShell:

Get-NetAdapter | Where-Object PhysicalMediaType -eq "Native 802.11"

Note: This command isolates the search to physical Wi-Fi adapters using the standard 802.11 wireless specification and does not rely on the adapter still having its default system name.

If there is a Wi-Fi or Wireless LAN connection listed, this is a finding.

Validate the site documentation to ensure the approval of use for Wi-Fi server connections.

If the connection (s) have not been approved, go to "Settings" then "Network and Internet" and remove/disable the Wi-Fi adapter. Any Wi-Fi connections listed or in use must be documented and approved by the information system security officer (ISSO) or authorizing official (AO).