[BUG] When enabling TLS 1.2 and TLS 1.3 in the GPO the TLS 1.2 or TLS 1.3 (and weak protocols) settings disappears from the GP result

[Blcktape]

When enabling TLS 1.3 in the GPO the TLS 1.2 settings disappear from the gpresult page in the Group Policy Management sometimes.
It looks like the settings are not being rendered.
After editing the GPO settings a few times the TLS 1.2 settings appear again. But after refreshing the settings page of the GPO the settings disappear again...

And after refreshing a few times the setting appear again...

Seems like a weird bug...

[Crosse]

Interesting! I haven’t done much of anything on Windows for a few years now but I’ll certainly take a look.

On Thu, Nov 4, 2021 at 11:53 AM Blcktape ***@***.***> wrote: When enabling TLS 1.3 in the GPO the TLS 1.2 settings disappear from the gpresult page in the Group Policy Management sometimes. It looks like the settings are not being rendered. After editing the GPO settings a few times the TLS 1.2 settings appear again. But after refreshing the settings page of the GPO the settings disappear again... [image: image] <https://user-images.githubusercontent.com/5654247/140371301-adca6edd-2cfa-4864-ac9b-107d413c6d55.png> [image: image] <https://user-images.githubusercontent.com/5654247/140371752-3e1a0d69-1f60-43fa-98c1-9a52ad9f777c.png> [image: image] <https://user-images.githubusercontent.com/5654247/140371862-e66b3d13-4b70-4942-8fa8-9e16c9012d69.png> And after refreshing a few times the setting appear again... [image: image] <https://user-images.githubusercontent.com/5654247/140372818-bd9fb5e6-20f1-4d4b-abd8-cd044273f2a5.png> Seems like a weird bug... — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#23>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAL3UH5KEC5YGGMKQN55D4LUKKT6TANCNFSM5HLY6I6A> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>.

-- -- Seth

[JavierRodger]

I can confirm the bug. I just disabled SSL3.0, SSL2.0, PCT and Multi-Protocol. After a while I checked some GPOs and saw nothing in. To fix it, I opened the GPO, enabled Multi-Protocol and disabled it again. In that moment all disabled protcols showed up in the result page.

Any idea to make this more reliable?

Thanks
Javier

[JavierRodger]

It looks like it also not appear in the gpresults, but the confifguration applied successfully

[Crosse]

I have a Windows machine again I can use for testing, so unless someone else using this policy has already solved the problem and can PR their changes, I'll try to figure out what's going on here soon.

[JavierRodger]

Any update on this?

[Crosse]

I was apparently way too optimistic when I said I could test this, because it looks like it's maybe only an issue in the GPMC GUI? While I have a Windows desktop now, I don't have a domain set up, so I can't use GPMC. The behavior I saw when attempting to reproduce this bug by editing local policy via gpedit.msc was that all the settings I changed showed up immediately with gpresult /scope computer /r /v.

Unfortunately, someone other than me will need to dig into this. I've been out of the Windows administration game for five years, now. 😞