Joy Services
All systems operational Sign in
JoyTipsWindows Server: first-login checklist

Windows Server: first-login checklist

Change the password, secure RDP, activate Windows Update and create a non-admin user — the first fifteen minutes on a new Windows VPS.

29 Aug 2026Joy Team1 min read
  1. Connect with Remote Desktop to your IP as Administrator using the password from the console.
  2. Press Ctrl+Alt+End → Change a password. Use 16+ characters.
  3. Change the RDP port (PowerShell: Set-ItemProperty 'HKLM:\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp' -Name PortNumber -Value 3390), allow it in Windows Firewall, restart TermService, reconnect on the new port.
  4. Confirm Network Level Authentication is on and set an account lockout policy (secpol.msc → Account Lockout Policy: 5 attempts / 15 minutes).
  5. Create a second administrator account for daily use; rename the built-in Administrator.
  6. Run Windows Update and reboot; set active hours.
  7. Set the time zone (Set-TimeZone 'India Standard Time').
  8. Disable services you do not need (Print Spooler, if not printing) and leave file sharing closed unless on a private VLAN.
  9. Take a snapshot from the server page before installing applications.

The full walkthrough with client instructions for every platform is in the Windows RDP guide.

windowsrdpsecurity
Was this article helpful?
Corrections and suggestions go straight to the team that wrote it — suggest an edit or see more in tips.

More in tips

Need help?
Stuck on a step? The engineers who run the network answer tickets 24/7. Contact support.
Next step

Try it on a real server. Deploy one by the hour and follow along.

DeployMore in tips