# This code sets the encryption level for all TS sessions
# ------ SCRIPT CONFIGURATION ------

use Win32::OLE qw(in);

use constant LOW_LEVEL => 1;
use constant CLIENT_COMPAT => 2;
use constant HIGH_ENCRYPTION => 3;
use constant FIPS_COMPLIANT => 4;

$strComputer = '.';
$intLevel = HIGH_ENCRYPTION;
# ------ END CONFIGURATION ---------
$objWMI = Win32::OLE->GetObject('winmgmts:\\\\' . $strComputer . '\\root\\cimv2');
$colItems = $objWMI->ExecQuery('Select * from Win32_TSGeneralSetting');
foreach my $objItem (in $colItems) {
    $intRC = $objItem->SetEncryptionLevel($intLevel);
    if ($intRC) {
        print 'Error setting encryption level for ' . $objItem->TerminalName . ':' . $intRC, "\n";
    }
    else {
        print 'Set encryption level for ' . $objItem->TerminalName . ' to ' . $intLevel, "\n";
    }
}