SSL 2.0

Enables or disables the use of SSL 2.0. By default for Windows clients, SSL 2.0 is disabled.

Note that SSL 2.0 is insecure and must not be used.

Changing this setting will require a restart of the computer before the setting will take effect.

Enable Client-side SSL 2.0 (eg., Internet Explorer)
Enable policy:

Registry Path	Value Name	Value Type	Value
SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client	Enabled	REG_DWORD	1
SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client	DisabledByDefault	REG_DWORD	0

Disable policy:

Registry Path	Value Name	Value Type	Value
SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client	Enabled	REG_DWORD	0
SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client	DisabledByDefault	REG_DWORD	1

Enable Server-side SSL 2.0 (eg., IIS)
Enable policy:

Registry Path	Value Name	Value Type	Value
SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server	Enabled	REG_DWORD	1
SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server	DisabledByDefault	REG_DWORD	0

Disable policy:

Registry Path	Value Name	Value Type	Value
SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server	Enabled	REG_DWORD	0
SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server	DisabledByDefault	REG_DWORD	1