IIS Crypto 3.2 not getting rid of Diffie-Hellman algorithms of less than 2048-bits

I’m trying to stop a server using Diffie Hellman key exchanges of less than 2048 bits, but I’m getting confusing results.
I’ve run
Get-TlsCipherSuite | Format-Table Name, Exchange, Cipher, Hash, Certificate
and I can see
TLS_DHE_RSA_WITH_A… Continue reading IIS Crypto 3.2 not getting rid of Diffie-Hellman algorithms of less than 2048-bits