> ## Documentation Index
> Fetch the complete documentation index at: https://docs.evevps.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Secure Your Windows RDP Server

> Learn three essential steps to harden your Evevps Windows server: change the default RDP port, enforce strong passwords, and restrict access with firewall rules.

When you deploy a Windows server with a public IP address, bots and automated scanners will inevitably try to guess your password.

Because we give you full `Administrator` access, your Evevps server is as secure as you make it. Luckily, securing your [Windows RDP](/windows-rdp/overview) only takes a few minutes. Here are the three most important things you should do right after logging in.

<Steps>
  <Step title="Change the Default RDP Port">
    By default, RDP uses port `3389`. Bots scan this port constantly. Changing it to a custom port (like `49152`) drops brute-force attempts to near zero.

    1. Open PowerShell as Administrator.
    2. Run this command, replacing `49152` with any number between 1024 and 65535:

    ```powershell theme={null}
    Set-ItemProperty -Path 'HKLM:\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp' -name "PortNumber" -Value 49152
    ```

    3. Allow your new port through the Windows Firewall:

    ```powershell theme={null}
    New-NetFirewallRule -DisplayName "Custom RDP Port" -Direction Inbound -LocalPort 49152 -Protocol TCP -Action Allow
    ```

    4. [Restart your Evevps server](/control-panel/server-panel) from the control panel. When connecting next time, add the port to your IP (e.g., `192.168.1.50:49152`).
  </Step>

  <Step title="Create a New User and Disable 'Administrator'">
    Bots always try to log in using the username `Administrator`. If you disable that account entirely, their attacks will fail instantly.

    1. Open **Computer Management** > **Local Users and Groups** > **Users**.
    2. Right-click in the empty space and select **New User**. Give it a unique name (e.g., `MaxTech`) and a strong password.
    3. Right-click your new user, select **Properties** > **Member Of**, and add them to the `Administrators` and `Remote Desktop Users` groups.
    4. Log out, log back in with your new user, and then right-click the default `Administrator` account to disable it.
  </Step>

  <Step title="Enable Account Lockout Policies">
    If a bot guesses the wrong password too many times, Windows can automatically lock them out.

    1. Open **Local Security Policy**.
    2. Go to **Account Policies** > **Account Lockout Policy**.
    3. Set the **Account lockout threshold** to `5 invalid logon attempts`.
  </Step>
</Steps>

## Related Articles

<CardGroup cols={2}>
  <Card title="Windows RDP Overview" icon="display" horizontal href="/windows-rdp/overview" />

  <Card title="Connect to Windows RDP" icon="arrow-right" horizontal href="/windows-rdp/connect" />

  <Card title="DDoS Protection" icon="shield" horizontal href="/security/ddos-protection" />
</CardGroup>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.