---
id: 3746
title: "Disable TLS 1.0 and 1.1 via GPO"
source_domain: projectblack.io
source_url: "https://projectblack.io/blog/disable-tls-1-0-and-1-1-via-gpo/"
published_at: "2025-03-29 06:58"
tags: ["windows-server", "tls", "hardening", "gpo", "schannel"]
phying_url: "https://phying.com/item/3746"
lang: en
---

# Disable TLS 1.0 and 1.1 via GPO

## Summary

Disabling TLS 1.0/1.1 (and Triple DES) on Windows via GPO: set the SCHANNEL protocol Enabled DWORDs to 0. The post notes this is server-side only and doesn't restrict outbound client connections.

## Intelligence Metadata

- **Sources:** projectblack.io
- **Published:** 2025-03-29 06:58
- **Original:** https://projectblack.io/blog/disable-tls-1-0-and-1-1-via-gpo/
- **Phying News:** https://phying.com/item/3746