to use TLS1.1 & 1.2 you can just have a look into IE Options > Advanced (last section). It is not recommended to disable TLS 1.0 because many other connections are using this level. Within GPO you can set the order of SSL Ciphers to tell your clients
to use TLS1.1 or 1.2 as preferred for connections (also RPD). Only a connection with same supported cipher by client and server will be established.
By default, only TLS 1.0 is supported in Windows 7, you must install the following update to add remote desktop service support for TLS 1.1 and TLS 1.2.
Please run regedit.exe from command prompt to open Registry Editor. Uner the location at
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\, create a DWORD value named
Triple DES 168, and set the disable value data as 0.
After that, please restart the computer.
More information, please refer to the following article.
