Skip to main content
When you deploy a Windows server with a public IP address, bots and automated scanners will inevitably try to guess your password. Because we give you full Administrator access, your FlashRDP server is as secure as you make it. Luckily, securing your Windows Windows RDP only takes a few minutes. Here are the three most important things you should do right after logging in.
1

Change the Default RDP Port

By default, RDP uses port 3389. Bots scan this port constantly. Changing it to a custom port (like 49152) drops brute-force attempts to near zero.
  1. Open PowerShell as Administrator.
  2. Run this command, replacing 49152 with any number between 1024 and 65535:
  1. Allow your new port through the Windows Firewall:
  1. Restart your FlashRDP server from the control panel. When connecting next time, add the port to your IP (e.g., 192.168.1.50:49152).
2

Create a New User and Disable 'Administrator'

Bots always try to log in using the username Administrator. If you disable that account entirely, their attacks will fail instantly.
  1. Open Computer Management > Local Users and Groups > Users.
  2. Right-click in the empty space and select New User. Give it a unique name (e.g., MaxTech) and a strong password.
  3. Right-click your new user, select Properties > Member Of, and add them to the Administrators and Remote Desktop Users groups.
  4. Log out, log back in with your new user, and then right-click the default Administrator account to disable it.
3

Enable Account Lockout Policies

If a bot guesses the wrong password too many times, Windows can automatically lock them out.
  1. Open Local Security Policy.
  2. Go to Account Policies > Account Lockout Policy.
  3. Set the Account lockout threshold to 5 invalid logon attempts.

Host SEO Crawlers (Screaming Frog, Puppeteer)

Run MT4 / MT5 for Forex Trading on a VPS

Host Your Own PaaS with Coolify

Last modified on June 17, 2026