The Security Mode setting that is found in TSCC.msc doesn't take effect instantly, apparently. I'm not sure if it requires a reboot of the server, or just a stop/start of each type of connection, but ...