More Speaking in Ciphers and other Enigmatic Tongues with a focus on SCHANNEL hardening.

The IISCrypto tool from NARTAC is not supported by Microsoft.  Use it at your own risk.

There are 3 Microsoft supported TLS configuration methods: GP, programmatic (via CryptoConfig) and cmdlets.

These methods are documented here:

Via GP and programmatically: https://msdn.microsoft.com/en-us/library/windows/desktop/bb870930(v=vs.85).aspx

Via cmdlets (Win10/Server 2016 and later): https://technet.microsoft.com/en-us/library/dn296632.aspx

Jim