Increase encryption level RDP

Question

Management requires that RDP be used company-wide with TLS 1.2 or if encrypted with TLS 1.3 supported by the client. It's Windows 10 and some Windows 11 clients in use. There is a domain with multiple Windows Server 2016 and Windows Server 2022 VMs.

How can I implement the default with group policies? And how can I Check encryption strength? Does somebody has any idea?

Answer 1

Looks like it is a bit hard to visibly confirm at present. You can configure in group policy or on the collection as below and it will use TLS 1.2 it just looks like it will use 1.0. You could use IISCRYPTO to lock the servers to TLS 1.2 or better which would give you peace of mind. https://learn.microsoft.com/en-us/troubleshoot/windows-server/remote/incorrect-tls-use-rdp-with-ssl-encryption