Information
The use of RC4 may increase an adversaries ability to read sensitive information sent over SSL/TLS.
Solution
to disable rc4 40/128, ensure the following key is absent. if the key is present, ensure it is set to 0. hklm \system\currentcontrolset\control\securityproviders\schannel\ciphers\rc4 40/128\enabled to disable rc4 56/128, ensure the following key is absent. if the key is present, ensure it is set to 0. hklm\system\currentcontrolset\control\securityproviders\schannel\ciphers\rc4 56/128\enabled to disable rc4 64/128, ensure the following key is absent. if the key is present, ensure it is set to 0. hklm\system\currentcontrolset\control\securityproviders\schannel\ciphers\rc4 64/128\enabled to disable rc4 128/128, ensure the following key is set to 0. rc4 128/128 is not enabled by default on server 2008 sp2 but is enabled by default on r2. hklm\system\currentcontrolset\control\securityproviders\schannel\ciphers\rc4 128/128\enabled