Forum Discussion
One Drive for business stopped working on Windows 7
Same here, in some cases, we are running Windows 7 x86 Pro and have been contacted by these users to say they get the same error message. We tried an uninstall and reinstall, did windows updates and closed teams and managed to get logged in. It was short lived, a few hours later it dropped and now it's not working and the same method fails.
How are you checking the status is forbidden?
KyotoUK MarekCmikiewicz
Hi both,I managed to fix mine shortly after I made this post. Hopefully it works for you.
So, it seems that Microsoft accidentally removed support for TLS 1.0 and 1.1 earlier than communicated. While they fixed it, some updates don't seem to have gone through and so they launched a fix for TLS 1.2 that works. My process, in case you get it elsewhere is:1: Uninstall Windows Update KB31402452: Download and install Windows Update KB3140245 from here: https://www.catalog.update.microsoft.com/search.aspx?q=kb31402453: Restart the machine4: Download and run the Easy Fix tool located here: https://support.microsoft.com/en-us/topic/update-to-enable-tls-1-1-and-tls-1-2-as-default-secure-protocols-in-winhttp-in-windows-c4bd73d2-31d7-761e-0178-11268bb10392#bkmk_easy5: Make following registry changes (I couldn't find TLS 1.1 or 1.2 in either location so changed the same DWORD key under the SSL 2.0 folder in the same location to 0):For TLS 1.1Registry location: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client
For TLS 1.2
DWORD name: DisabledByDefault
DWORD value: 0Registry location: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client
DWORD name: DisabledByDefault
DWORD value: 06: Restart machine7: Try logging in againIt seems this page is being cached by Google so am adding to the solution here.
I have just had this same issue and what is described above is part of the process. You also need to consider this page where it explains the steps to control which protocols are permitted within Windows 7: -
https://support.microsoft.com/en-us/topic/update-to-enable-tls-1-1-and-tls-1-2-as-default-secure-protocols-in-winhttp-in-windows-c4bd73d2-31d7-761e-0178-11268bb10392
Once you run the Easy Fix Tool, you would want to go back and change the entry in both paths: -
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp\DefaultSecureProtocolsand
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp\DefaultSecureProtocolsto
aa0As is said in the KB: -
By default in Windows, this value is 0x0A0 to enable SSL 3.0 and TLS 1.0 for WinHTTP. The above example keeps these defaults, and also enables TLS 1.1 and TLS 1.2 for WinHTTP. This configuration ensures that the change doesn't break any other application that might still rely on SSL 3.0 or TLS 1.0. You can use the value of 0xA00 to only enable TLS 1.1 and TLS 1.2.
Cheers
Pops
Hi,
I carried out some tests based on what EpicTriffid wrote on Apr 16th.
The outcome is that the only thing which is necessary for One Drive to work again in Windows 7 is to install Easy Fix from this location https://support.microsoft.com/en-us/topic/update-to-enable-tls-1-1-and-tls-1-2-as-default-secure-protocols-in-winhttp-in-windows-c4bd73d2-31d7-761e-0178-11268bb10392#bkmk_easy
It is not necessary to uninstall KB3140245. It is not needed and not safe to change the value in registry under SSL 2.0.
Just Easy Fix which enables TLS 1.1 and TLS 1.2 as default secure protocols in WinHTTP, then reboot and THAT'S IT.
Works like a charm 🙂UPDATE:
I also had machines without KB3140245 initially installed. In those cases it was necessary to install KB and then proceed to Easy Fix.
- 5/29/2021
Had to uninstall update, then install updated update, then apply Easy Fix: everything works! Thank you!
- The solution doesn't work. I have all TLS (1.0, 1.1, 1.2) enabled and OneDrive still doesn't work. Are you planning to fix this?
