Honor cipher suite order

This policy setting determines how the SMB server selects a cipher suite when negotiating a new connection with an SMB client. If you enable this policy setting, the SMB server will select the cipher suite it most prefers from the list of client-supported cipher suites, ignoring the client's preferences. If you disable or do not configure this policy setting, the SMB server will select the cipher suite the client most prefers from the list of server-supported cipher suites. Note: When configuring this security setting, changes will not take effect until you restart Windows.

Policy Details

Policy Name

Pol_HonorCipherSuiteOrder

Registry Key

Software\Policies\Microsoft\Windows\LanmanServer

Value Name

HonorCipherSuiteOrder

Supported On

At least Windows Server 2016, Windows 10

OMA-URI (CSP)

ADMX_LanmanServer/Pol_HonorCipherSuiteOrder

OS Build Version:10.0.22000, 10.0.19043.1202, 10.0.19042.1202, 10.0.19041.1202

CSP Version:10.0

Conflict Resolution:LastWrite

Allowed Editions:

EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationHolographic BusinessPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval

Policy State Values

Enabled: 1

Disabled: 0

Available Languages

en-us