How do I turn off TLS 1.0 with regedit??

[Guest]

I have been trying to shut off just TLS 1.0 in the registry editor but I
cannot find the correct key. Also I would like to make a GPO so all my
machines will have this turned off. There does not seem to be much info on
how to do this anywhere.
Thank you for your help!
David Eccles

 

[Wesley Vogel]

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0

How to disable PCT 1.0, SSL 2.0, SSL 3.0, or TLS 1.0 in Internet Information
Services
http://support.microsoft.com/kb/187498

How to Restrict the Use of Certain Cryptographic Algorithms and Protocols in
Schannel.dll
http://support.microsoft.com/kb/245030

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Steven L Umbach]

The following registry entry is the default setting on the "client" computer
that has TLS 1.0 disabled.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\SecureProtocols: 0x00000028 .

You can implement that with a Group Policy logon script using a .reg file to
implement the setting. If the user has access to IE advanced settings they
will however be able to enable that setting again if they try to until logon
is done again.--- Steve

http://support.microsoft.com/kb/310516 --- how to create and use .reg
files.

 

[Wesley Vogel]

We should just ask each other questions. ;-)

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In