Disable TLS 1.0 and 1.1 via GPO

Disabling TLS 1.0/1.1 (and Triple DES) on Windows via GPO: set the SCHANNEL protocol Enabled DWORDs to 0. The post notes this is server-side only and doesn't restrict outbound client connections.