diff --git a/basis/random/windows/windows.factor b/basis/random/windows/windows.factor
index c8e08c9abe..aa9404fbb2 100644
--- a/basis/random/windows/windows.factor
+++ b/basis/random/windows/windows.factor
@@ -60,9 +60,13 @@ M: windows-rng random-bytes* ( n tuple -- bytes )
     MS_DEF_PROV
     PROV_RSA_FULL <windows-rng> system-random-generator set-global
 
-    MS_STRONG_PROV
-    PROV_RSA_FULL <windows-rng> secure-random-generator set-global
+    [
+        MS_STRONG_PROV
+        PROV_RSA_FULL <windows-rng> secure-random-generator set-global
+    ] [
+        drop
+        MS_ENH_RSA_AES_PROV
+        PROV_RSA_AES <windows-rng> secure-random-generator set-global
+    ] recover
 
-    ! MS_ENH_RSA_AES_PROV
-    ! PROV_RSA_AES <windows-rng> secure-random-generator set-global
 ] "random.windows" add-init-hook