GPO tool

Group Policy made searchable

A free ADMX browser or comparison tool for IT administrators. Search policies, find registry keys, and see exactly what each setting writes to the Windows Registry. Or compare two GPO backups to see exactly what has changed between them.

Select a product
  • Select a category.

Cipher suite order

This policy setting determines the cipher suites used by the SMB client.

If you enable this policy setting, cipher suites are prioritized in the order specified.

If you enable this policy setting and do not specify at least one supported cipher suite, or if you disable or do not configure this policy setting, the default cipher suite order is used.

SMB 3.11 cipher suites:

AES_128_GCM
AES_128_CCM
AES_256_GCM
AES_256_CCM

SMB 3.0 and 3.02 cipher suites:

AES_128_CCM

How to modify this setting:

Arrange the desired cipher suites in the edit box, one cipher suite per line, in order from most to least preferred, with the most preferred cipher suite at the top. Remove any cipher suites you don't want to use.

Note: When configuring this security setting, changes will not take effect until you restart Windows.

Registry Information

VendorMicrosoft
ProductLanman Workstation
CategoryLanman Workstation
Applies toComputer Configuration
Supported onWindows 10 0
Registry Key[HKLM]SoftwarePoliciesMicrosoftWindowsLanmanWorkstation

Policy Settings

MultiText_CipherSuiteOrder

Registry Key[HKLM]SoftwarePoliciesMicrosoftWindowsLanmanWorkstation
Value NameCipherSuiteOrder
TypeREG_MULTI_SZ