How to Completely Disable ‘Wi-Fi Sense’ via Group Policy in Windows 11

Wi-Fi Sense is a legacy network feature originally introduced in Windows 10 (and partially carried over into Windows 11 under broader networking settings) designed to automatically connect users to crowd-sourced open Wi-Fi hotspots and, historically, share Wi-Fi passwords with Outlook/Skype contacts. While Microsoft has deprecated the most controversial password-sharing aspects of the feature, the underlying telemetry and automatic connection logic to “suggested open hotspots” remains a significant security risk in enterprise environments. Automatically connecting a corporate laptop to an unverified, open Wi-Fi network exposes the device to Man-in-the-Middle (MitM) attacks, rogue access points, and severe data interception.

This guide explains how to completely disable Wi-Fi Sense and the automatic connection to open hotspots system-wide using the Group Policy Editor in Windows 11, ensuring workstations only connect to explicitly trusted networks.

Disable Wi-Fi Sense via Group Policy

To enforce a strict block that prevents the OS from utilizing crowd-sourced hotspot data and locks the networking configuration from user modification, we must deploy an administrative template. Note that this requires Windows 11 Pro, Enterprise, or Education editions.

1. Log into Windows 11 with an Administrator account.
2. Press the Windows Key + R to open the Run dialogue box.
3. Type gpedit.msc and press Enter to launch the Local Group Policy Editor.
4. In the left-hand navigation pane, strictly follow this exact path:

   Computer Configuration > Administrative Templates > Network > WLAN Service > WLAN Settings

5. In the right-hand pane, locate the policy named Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services.
6. Double-click the policy to open its configuration window.
7. Select the radio button next to Disabled.
8. Click Apply, then click OK.

Verify the Configuration Lockdown

To enforce the change immediately across the system without requiring a full reboot, open an elevated Command Prompt and execute gpupdate /force.

To verify the restriction is active, navigate to Settings > Network & internet > Wi-Fi. Depending on your specific Windows 11 build, the toggles relating to “Connect to suggested open hotspots” or “Hotspot 2.0 networks” will either be completely removed from the interface or greyed out with a message stating “Some of these settings are hidden or managed by your organization.” The Windows 11 networking stack is now securely locked down, and the device will only associate with Wi-Fi access points explicitly configured by the user or the IT department.