The "Set client connection encryption level" machine setting should be configured correctly.
[low/Medium/High]
Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security\Set client connection encryption level
oval:org.secpod.oval:def:8895
SCAP Repo OVAL Definition
2013-01-21