How to create a batch or vbs file to enable TLS 1.0 and SSL 3.0?

Due to a GPO I have to keep enabling TLS 1.0 and SSL 3.0.  I’m looking for a way to automate that process.
kbay808Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Sam JacobsDirector of Technology Development, IPMCommented:
Here is a PowerShell script where you can enable or disable any of the following protocols:
TLS1.0
TLS1.1
TLS1.2
SSL3.0

https://4sysops.com/archives/disable-ssl-and-tls-1-01-1-on-iis-with-powershell/
kbay808Author Commented:
I prefer to use vbs or batch file if possible.
Sam JacobsDirector of Technology Development, IPMCommented:
OK ... I need to go offline until late tomorrow night.
If no one has responded by then, I'll convert the PowerShell to VBS.
CompTIA Network+

Prepare for the CompTIA Network+ exam by learning how to troubleshoot, configure, and manage both wired and wireless networks.

kbay808Author Commented:
No problem.  I will be offline until Monday.  Thanks for your help.
Sam JacobsDirector of Technology Development, IPMCommented:
Here is a simple batch file to enable TLS 1.0 and SSL 3.0.
Create a .VBS file (e.g. EnableProtocols.vbs) with the following:
' Create a Shell script object:
Set objShell = CreateObject( "WScript.Shell" )

' Create registry keys and values to enable SSL 3.0 client protocols:
objShell.RegWrite "HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client\Enabled", 1, "REG_DWORD"
objShell.RegWrite "HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client\DisabledByDefault", 0, "REG_DWORD"

' Create registry keys and values to enable SSL 3.0 server protocols:
objShell.RegWrite "HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server\Enabled", 1, "REG_DWORD"
objShell.RegWrite "HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server\DisabledByDefault", 0, "REG_DWORD"

' Create registry keys and values to enable TLS 1.0 client protocols:
objShell.RegWrite "HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client\Enabled", 1, "REG_DWORD"
objShell.RegWrite "HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client\DisabledByDefault", 0, "REG_DWORD"

' Create registry keys and values to enable TLS 1.0 server protocols:
objShell.RegWrite "HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server\Enabled", 1, "REG_DWORD"
objShell.RegWrite "HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server\DisabledByDefault", 0, "REG_DWORD"

' Release the Shell script object
Set objShell = Nothing

Open in new window

Then create a shortcut on your desktop with the following target:
"<path to script>\EnableTLS.vbs"  - you can name it anything (e.g. EnableProtocols)

Then simply right-click on the shortcut, and select Run As Administrator (it must be run elevated, or it will not work).

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
kbay808Author Commented:
Thank you very much
Sam JacobsDirector of Technology Development, IPMCommented:
You are most welcome.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Batch

From novice to tech pro — start learning today.