How to limit SSH encryption ciphers?

We would like to deploy WinSCP within our organization. However, only AES/SSH2 can be used.

Is there a way to remove support for all encryption ciphers other than SSH-2/AES? Essentially, we don't want users to be able to select anything other than AES.

Thanks!

You should limit it on the server side.