You must execute the script with administrative credentials.Īpply patch KB3080079 for remote desktop communication prior to executing the PowerShell script to avoid breaking the Remote Desktop Client functionality once TLS 1.0 is disabled on the Windows 2008 R2 SP1 Server.Īlso patch NDP45-KB2954853-圆4 has to be applied for. Requirements set PowerShell execution policy to 'remotesigned' or 'unrestricted' to allow the script to execute. Please see the following patch that has been released by Microsoft: PLEASE NOTE: Windows Server 2008 SP2 now supports TLS 1.1 and 1.2. PLEASE NOTE: Windows Server 2003 does not support TLS 1.2. There is a version for Windows 7 and a version for Windows 2008 R2 SP1 to allow the Remote Desktop Client to operate properly once TLS 1.0 has been disabled. If your environment has a majority of Windows 7 and Windows Server 2008 R2 SP1 systems you will require the following patch KB3080079.

The script will validate if the proper patches have been installed to avoid disrupting Remote Desktop Services connectivity when TLS 1.0 is disabled. This project leverages a custom PowerShell script allowing administrators to make their Windows Server 2008 R2 Server SP1 TLS 1.2 compliant.The script disables legacy ciphers, SSL 3.0, SSL 2.0, TLS 1.0, and TLS, 1.1.

PowerShell script to enable TLS 1.2 on a Windows Server 2008 R2 SP1

Test tls 1.2 powershell