How to Completely Disable ‘WiFi Sense’ via Group Policy in Windows 11

Windows 11 includes a legacy telemetry and networking component known as “WiFi Sense” (originally introduced in Windows 10 and largely deprecated, but remnants remain in enterprise networking stacks). Historically, this feature allowed the operating system to automatically connect to open Wi-Fi hotspots and, in earlier iterations, share Wi-Fi credentials with Outlook and Skype contacts. While the most aggressive aspects of credential sharing have been retired by Microsoft, the underlying framework that scans for and suggests open, crowdsourced networks still exists. In zero-trust enterprise environments, automatically connecting to unverified, unencrypted public Wi-Fi networks poses a massive man-in-the-middle (MitM) and data exfiltration risk.

This guide explains how to completely disable ‘WiFi Sense’ via Group Policy in Windows 11, neutralizing this automated networking behavior and enforcing strict, manual-only wireless connections.

Disable WiFi Sense via Group Policy

To enforce a strict block that disables the feature globally across the OS and prevents the machine from automatically associating with crowdsourced networks, we must deploy an administrative template. Note that this requires Windows 11 Pro, Enterprise, or Education editions.

1. Log into Windows 11 with an Administrator account.
2. Press the Windows Key + R to open the Run dialogue box.
3. Type gpedit.msc and press Enter to launch the Local Group Policy Editor.
4. In the left-hand navigation pane, strictly follow this exact path:

   Computer Configuration > Administrative Templates > Network > WLAN Service > WLAN Settings

5. In the right-hand pane, locate the policy named Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services.
6. Double-click the policy to open its configuration window.
7. Select the radio button next to Disabled. (By disabling this policy, we instruct the WLAN AutoConfig service to reject all automated association attempts with crowdsourced or open networks).
8. Click Apply, then click OK.

Verify the Configuration Lockdown

Group Policy changes affecting network services require the system to refresh its configuration.

To force the policy update immediately across the OS, open Command Prompt as Administrator and run gpupdate /force. Once the policy is applied, the Windows 11 network stack is cryptographically bound to ignore all WiFi Sense triggers. The machine will only connect to wireless networks that have been explicitly provisioned via MDM profiles or manually authenticated by the end-user, significantly hardening the endpoint against unauthorized network spoofing.