...
You'll need to login via RDP as administrator.
Then download IISCrypto for your specific version of windows from Nartac Software:
https://www.nartac.com/Products/IISCrypto/Download
.Net 4.0 for 2012 and higher
.Net 2.0 for 2008 and lower
Run the tool, and deselect SSL 2.0 and SSL 3.0 in the Protocols Enabled section.
- This will also be deselected if you use any of the 3 Templates (Best Practices, PCI, or FIPS 140-2).
Click Apply
Reboot the server to apply the changes.
...
