Policy
Honor cipher suite order
This policy setting determines how the SMB server selects a cipher suite when negotiating a new connection with an SMB client. If you enable this policy setting, the SMB server will select the cipher suite it most prefers from the list of client-supported cipher suites, ignoring the client's preferences. If you disable or do not configure this policy setting, the SMB server will select the cipher suite the client most prefers from the list of server-supported cipher suites. Note: When configuring this security setting, changes will not take effect until you restart Windows.
1e02fa52804e Pol_HonorCipherSuiteOrder Registry
Copy registry mappings
HKLM\Software\Policies\Microsoft\Windows\LanmanServer\HonorCipherSuiteOrder (enabled) = 1
HKLM\Software\Policies\Microsoft\Windows\LanmanServer\HonorCipherSuiteOrder (disabled) = 0Policy notes
This policy setting determines how the SMB server selects a cipher suite when negotiating a new connection with an SMB client. If you enable this policy setting, the SMB server will select the cipher suite it most prefers from the list of client-supported cipher suites, ignoring the client's preferences. If you disable or do not configure this policy setting, the SMB server will select the cipher suite the client most prefers from the list of server-supported cipher suites. Note: When configuring this security setting, changes will not take effect until you restart Windows.