Check TLS 1.0 for all users

[Jesper Ohlsson [MSFT]]

>Hello,
>I want to the option "TLS1.0" to be checked
>for all users on the machine.
>How can this be done?
>If I check this as administrator, there is
>no effect for all the other users ..
>
>greetz, heinrich
>

Hi

I believe this is decided by a value in HKCU so if you can deploy/check
this value in some way you should be able to set the value for each user.
Depending on if these are new or existing users you can do it differently.

Registry location (from 263202):
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
SettingsDefault: [DWORD] SecureProtocols 0x00000000 (0)

cleared = 0x00000000 (0)
selected = 0x00000080 (128)

NOTE: Since each protocol modifies the same registry key, the DWORD value
will be a hexadecimal sum of the decimal value of each check box (with the
exception of Fortezza). For example:

Checking all protocols will yield a new value of 0x000000aa (170)
PCT1.0 + SSL2.0 + SSL3.0 + TLS1.0
2 + 8 + 32 + 128 = 170 Decimal or "aa" in Hex

Or another:
Checking only SSL2.0 and SSL3.0 will result in a value of 0x00000028 (40)

For IE6 issues use: microsoft.public.windows.inetexplorer.ie6.browser
--
Best regards
Jesper Ohlsson
------------------------
This posting is provided "AS IS" with no warranties, and confers no rights.