{"id":4924,"date":"2023-11-16T09:57:48","date_gmt":"2023-11-16T17:57:48","guid":{"rendered":"https:\/\/SUMMALAI.COM\/?p=4924"},"modified":"2023-11-16T09:57:50","modified_gmt":"2023-11-16T17:57:50","slug":"how-to-disable-tls-1-0-and-tls-1-1-via-group-policy","status":"publish","type":"post","link":"https:\/\/SUMMALAI.COM\/?p=4924","title":{"rendered":"How to Disable\u00a0TLS\u00a01.0 and TLS 1.1 via Group Policy"},"content":{"rendered":"\n<p id=\"2054\"><strong>How to Disable\u00a0<\/strong>TLS<strong>\u00a01.0 and TLS 1.1 via Group Policy<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\"><li><strong>Open regedit utility<\/strong><\/li><\/ol>\n\n\n\n<p id=\"6c1c\">Open Group Policy Management (gpmc.msc) in a Domain Controller.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/miro.medium.com\/v2\/resize:fit:700\/0*vyReA_Y1fddjHeIz.png\" alt=\"Open regedit utility\"\/><\/figure>\n\n\n\n<p id=\"22d9\"><strong>2. Creating a GPO in the Domain Controller<\/strong><\/p>\n\n\n\n<p id=\"1aee\">Navigate to the OU where Policy is to be linked and right-click and select \u2018Create a GP in this domain and Link it here\u2019; In this demo select \u2018Domain Controllers\u2019 OU.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/miro.medium.com\/v2\/resize:fit:700\/0*XijgTewCFK1Krjz6.png\" alt=\"Creating a GPO in the Domain Controller\"\/><\/figure>\n\n\n\n<p id=\"eabc\"><strong>3. Rename the GPO to \u2018Disable_TLS 1.0_TLS 1.1\u2019<\/strong><\/p>\n\n\n\n<p id=\"0975\">Name the New GPO and click on \u2018OK\u2019; this creates a New GP which is linked to the OU.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/miro.medium.com\/v2\/resize:fit:700\/0*xRoi8fcruP_8E3zA.png\" alt=\"Rename the GPO to \u2018Disable_TLS 1.0_TLS 1.1\u2019\"\/><\/figure>\n\n\n\n<p id=\"f13d\"><strong>4. Edit the \u2018Disable_TLS 1.0_TLS 1.1\u2019 GPO<\/strong><\/p>\n\n\n\n<p id=\"da6d\">Right-click the Policy and click on \u2018Edit\u2019.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/miro.medium.com\/v2\/resize:fit:700\/0*DagBET-rdRemvBL1.png\" alt=\"Edit the \u2018Disable_TLS 1.0_TLS 1.1\u2019 GPO\"\/><\/figure>\n\n\n\n<p id=\"8575\"><strong>5. Create Registry Item in Group Policy<\/strong><\/p>\n\n\n\n<p id=\"6172\">Navigate to&nbsp;<strong>Computer Configurations<\/strong>&nbsp;\u2013&gt;&nbsp;<strong>Preferences<\/strong>&nbsp;\u2013&gt;&nbsp;<strong>Windows Settings<\/strong>&nbsp;\u2013&gt;&nbsp;<strong>Registry.<\/strong><br>Create a new Registry by Right click on the blank space and selecting&nbsp;<strong>New&nbsp;<\/strong>\u2013&gt;&nbsp;<strong>Registry<\/strong>&nbsp;Item.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/miro.medium.com\/v2\/resize:fit:700\/0*YQ1vW-t1ovQRjyBl.png\" alt=\"Create Registry Item in Group Policy\"\/><\/figure>\n\n\n\n<p id=\"b51b\"><strong>6. Update Registry Properties<\/strong><\/p>\n\n\n\n<p id=\"f633\">In new Registry Properties, update the details as below and click on \u2018OK\u2019.<br>Action: Update<br>Hive: HKEY_LOCAL_MACHINE<br>Key Path: SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\SCHANNEL\\Protocols\\TLS 1.0\\Client<br>Value name: Enabled<br>Value type: REG_DWORD<br>Value data: 0<br>Base: Hexadecimal<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/miro.medium.com\/v2\/resize:fit:700\/0*A2z-3M7lX-GFjC7O.png\" alt=\"Update Registry Properties\"\/><\/figure>\n\n\n\n<p id=\"0114\"><strong>7. [OPTIONAL] Commands to create Registry Item in Group Policy<\/strong><\/p>\n\n\n\n<p id=\"45f2\">Similar to above step, create below keys to Disable TLS 1.0 as well as TLS 1.1,<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/miro.medium.com\/v2\/resize:fit:700\/0*MM9Q3YfHpgsZCHBm.png\" alt=\"[OPTIONAL] Commands to create Registry Item in Group Policy\"\/><\/figure>\n\n\n\n<p id=\"9970\"><strong>8. [OPTIONAL] List of Registry Items in Group Policy<\/strong><\/p>\n\n\n\n<p id=\"d6fa\">The image shows the list of Registry items created in Group Policy.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/miro.medium.com\/v2\/resize:fit:700\/0*xlxphJpgEiXvs7jH.png\" alt=\"[OPTIONAL] List of Registry Items in Group Policy\"\/><\/figure>\n\n\n\n<p id=\"5056\">We hope this post would help you know how to\u00a0disable TLS 1.0\u00a0and TLS 1.1 via Group Policy to enhance the security of your infrastructure. <\/p>\n\n\n\n<p>Ref: <a href=\"https:\/\/thesecmaster.com\/how-to-disable-tls-1-0-and-tls-1-1-via-group-policy\/\">How to Disable TLS 1.0 and TLS 1.1 via Group Policy &#8211; The Sec Master<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>How to Disable\u00a0TLS\u00a01.0 and TLS 1.1 via Group Policy Open regedit utility Open Group Policy Management (gpmc.msc) in a Domain Controller. 2. Creating a GPO in the Domain Controller Navigate to the OU where Policy is to be linked and right-click and select \u2018Create a GP in this domain and Link it here\u2019; In this <a class=\"read-more\" href=\"https:\/\/SUMMALAI.COM\/?p=4924\">Read More<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0,"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[10,14,15],"tags":[1710],"class_list":["post-4924","post","type-post","status-publish","format-standard","hentry","category-microsoft","category-windows-7-8-10","category-windows-servers","tag-how-to-disable-tls-1-0-and-tls-1-1"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts\/4924","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4924"}],"version-history":[{"count":1,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts\/4924\/revisions"}],"predecessor-version":[{"id":4925,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts\/4924\/revisions\/4925"}],"wp:attachment":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4924"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4924"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4924"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}