DirectAccess /w AES-256?

Hello,

Thanks to some great assistance from Microsoft, I now have DirectAccess in Windows Server 2012 R2 configured using both client and computer authentication with certificates, however when the initial IP-HTTPS connection gets established with the DA server the connection always uses AES-128 in Galois Counter Mode.

My question is whether it's possible to configure DA to only use AES-256, whether it be with GCM or CBC, and if so how is it achieved?

It's not clear how to do this, and any attempt to configure SSL configuration settings either with local computer policy or group policy just causes carnage with DA.

Any help or advice is much appreciated!

Thanks,

Dave