What you need
The server's IPv4 address and the Administrator password from the customer portal. If you cannot connect at all, the browser-based console in the control panel works even when networking or RDP is misconfigured.
Connecting from Windows
Press Win + R, type mstsc and press Enter. Enter the IPv4 address, click Connect, and sign in as Administrator. Accept the certificate prompt on first connection; the server uses a self-signed certificate until you install your own.
Save the connection with Show Options and Save As to get a .rdp file you can double-click later. Under Local Resources you can share the clipboard and local drives with the server.
Connecting from macOS
Install Windows App (formerly Microsoft Remote Desktop) from the Mac App Store, add a PC with the server address, and connect with the Administrator credentials.
Connecting from Linux
Remmina is preinstalled on many desktops. From a terminal, FreeRDP also works:
xfreerdp /v:203.0.113.10 /u:Administrator /dynamic-resolution /clipboardFirst steps after logging in
- Run Windows Update until no updates remain, rebooting as prompted.
- Create a named administrator account for yourself and use it day to day.
- Set the time zone in Settings > Time & language.
- Take a snapshot from the control panel once the server is patched.
Secure RDP
Exposed RDP is one of the most attacked services on the internet. Do as many of these as your situation allows.
Keep Network Level Authentication on
NLA requires credentials before a session is created, which blocks many exploits and reduces load from scanners. Check it under System Properties > Remote ("Allow connections only from computers running Remote Desktop with Network Level Authentication").
Limit who can connect
If you connect from fixed addresses, scope the RDP rule in PowerShell, run as administrator:
Set-NetFirewallRule -DisplayGroup "Remote Desktop" -RemoteAddress 198.51.100.7,198.51.100.8You can enforce the same restriction in the VeloxMedia control panel firewall, so unwanted traffic never reaches the server. If your address changes often, connect through a WireGuard VPN and allow RDP only from the VPN subnet.
Lock out repeated failures
net accounts /lockoutthreshold:10 /lockoutwindow:15 /lockoutduration:15This locks an account for 15 minutes after ten bad passwords in 15 minutes. Note that the built-in Administrator account is exempt from lockout by default, which is another reason to use a named admin and give Administrator a very long random password.
Use long passwords
Use a passphrase of at least 16 characters, unique to this server, stored in a password manager.
Watch the logs
Failed sign-ins are logged as event ID 4625 in the Security log. A quick check from PowerShell:
Get-WinEvent -FilterHashtable @{LogName='Security';Id=4625} -MaxEvents 20Performance tips
- For a smoother session over long distances, lower the colour depth and turn off desktop background and font smoothing under Experience.
- Choose the region closest to you; RDP is sensitive to latency.
- Windows Server is comfortable from Medium upwards; Pro with six cores suits multi-user or application-server roles.