How to Completely Disable ‘Phone Link’ via Group Policy in Windows 11

Windows 11 features deep integration with mobile devices via the “Phone Link” application (formerly Your Phone). This service establishes a continuous background connection (via Bluetooth, Wi-Fi, and Microsoft’s cloud infrastructure) to a user’s Android or iOS device, syncing SMS messages, notifications, call logs, and even rendering mobile applications directly on the Windows desktop. While highly convenient for consumers, Phone Link represents a colossal data exfiltration and network bridging vulnerability in strict enterprise, military, or zero-trust environments. Permitting an unmanaged personal device to bridge its cellular network, extract SMS-based multi-factor authentication (MFA) tokens, or mirror unsanctioned applications onto a secure corporate workstation completely bypasses established firewall and data-loss prevention (DLP) controls.

This guide explains how to completely disable ‘Phone Link’ via Group Policy in Windows 11, enforcing a strict zero-trust model where all unmanaged device bridging is cryptographically blocked.

Disable Phone Link via Group Policy

To enforce a strict block that disables the Phone Link bridging service globally across the OS, we must deploy an administrative template. Note that this requires Windows 11 Pro, Enterprise, or Education editions.

1. Log into Windows 11 with an Administrator account.
2. Press the Windows Key + R to open the Run dialogue box.
3. Type gpedit.msc and press Enter to launch the Local Group Policy Editor.
4. In the left-hand navigation pane, strictly follow this exact path:

   Computer Configuration > Administrative Templates > System > Group Policy

5. In the right-hand pane, locate the policy named Phone-PC linking on this device.
6. Double-click the policy to open its configuration window.
7. Select the radio button next to Disabled. (By explicitly disabling this policy, we instruct the Windows kernel to permanently sever the APIs that allow the Phone Link app to authenticate, pair, and establish network bridges with external mobile hardware).
8. Click Apply, then click OK.

Verify the Configuration Lockdown

Group Policy changes affecting system-level device bridging require the system to refresh its configuration.

To force the policy update immediately across the OS, open Command Prompt as Administrator and run gpupdate /force. To verify the restriction is active, attempt to launch the “Phone Link” application from the Windows Start menu, or navigate to Settings > Bluetooth & devices > Phone Link. The application will either fail to launch or the settings page will be greyed out, displaying a banner stating, “Some of these settings are hidden or managed by your organization.” The Windows 11 workstation is now cryptographically bound to operate as an isolated node, completely mitigating the risk of unauthorized mobile device bridging.