6.1 Test Provider Availability Get-ChildItem "HKLM:\SOFTWARE\Classes" -ErrorAction SilentlyContinue | Where-Object $_.PSChildName -like "*MSOLEDBSQL*" 6.2 Capture Network Traffic Use Wireshark or netsh trace to observe TLS handshake:
Set conn = Server.CreateObject("ADODB.Connection") conn.Open "Provider=SQLOLEDB;Data Source=myServer;Initial Catalog=myDB;Integrated Security=SSPI;" microsoft ole db provider for sql server tls 1.2
Provider=SQLOLEDB;Data Source=sqlserver.contoso.com;Initial Catalog=MyDB;Integrated Security=SSPI; to: microsoft ole db provider for sql server tls 1.2
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client] "Enabled"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client] "Enabled"=dword:00000000 microsoft ole db provider for sql server tls 1.2
Then ensure TLS 1.2 is enabled:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client] "Enabled"=dword:00000001 "DisabledByDefault"=dword:00000000 Before (fails with TLS 1.2 only server):