How to Change the RDP Port for a Windows Server?

In this era, security is a big question for all the orgnization. By default the RDP port is 3389 and to secure the first thing that come to our mind that is there a way that we can modify the port for the RDP access to add an extra layer of security.

Port numbers in computer networking represent communication endpoints. Ports are unsigned 16-bit integers (0-65535) that identify a specific process or network service. IANA is responsible for internet protocol resources, including the registration of commonly used port numbers for well-known Internet services.

1. Well Known Ports: 0 through 1023.
2. Registered Ports: 1024 through 49151.
3. Dynamic/Private : 49152 through 65535.

TCP ports use the Transmission Control Protocol, the most commonly used protocol on the Internet and any TCP/IP network. TCP enables two hosts to establish a connection and exchange streams of data. TCP guarantees delivery of data and that packets will be delivered in the same order in which they were sent. Guaranteed communication/delivery is the key difference between TCP and UDP.

UDP ports use the Datagram Protocol. Like TCP, UDP is used in combination with IP (the Internet Protocol) and facilitates the transmission of datagrams from one computer to applications on another computer, but unlike TCP, UDP is connectionless and does not guarantee reliable communication; it's up to the application that received the message to process any errors and verify correct delivery. UDP is often used with time-sensitive applications, such as audio/video streaming and realtime gaming, where dropping some packets is preferable to waiting for delayed data.

Changing the RDP from Registry first

Press “Windows + R” to open the Windows Run dialog. Type “regedit” in the Run box and press Enter to open Windows Registry Editor.

Once the wizard open navigate to the below location:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp\PortNumber

Right click on PortNumber and Edit > Select Decimal Type > Create a new port number that you want, and then click OK.

Changing the RDP From Firewall

The newly set RDP port must be open in the firewall before it can be used. About how to open a port in Windows Firewall, please refer to

Changing the RDP from PowerShell

1. Open PowerShell as an administrator
2. Run this command Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp' -Name 'portnumber' -Value XYZ

Once all this is done, we need to restart the Remote Desktop Service to get that affective. And, now to access through RDP we need to make a bit change that is abc.india.com:portnumber

Enable advance scaling feature in windows server 2019.

We have many complaints about DPI settings that can no longer be set in Windows server 2019 as in 2008R2. Having this feature is best in the case of a large screen. It only occurs with the remote desktop session. Because the remote control session display settings feature cannot change.

Windows Server 2008 R2 has a feature to set up the solution after logging in to a remote desktop session. But, Windows Server 2019 does not have that feature. Also, it is a big problem for those who use the big screen in their work.

The RDP conform is in line with the local. Thus, by changing the local system configuration we may find it running on a remote server. So, here comes the preview rating system for Windows Server 2019 which has a rating scale from 100-500.

To make RDSH functioning with DPI for Windows server 2019 RDSH we need to add a registry code:

Registry Hive HKEY_LOCAL_MACHINE Registry Path SYSTEM\ CurrentControlSet\ Control\ Terminal Server\ WinStations Value Name IgnoreClientDesktopScaleFactor Value Type REG_DWORD Enabled Value 1 Disabled Value 0

After making the above changes, new sessions should have the ability to use DPI. To check it we need to sign out from the system and sign back in.

Please try and answer if you are able to deal with this problem using the above procedure.

Why and how to change the password of a computer?

As we all know that password is a part of security. We must change our password to ensure the security of the computer account. If we do not change the password on a regular basis, your familiarity with your password would eventually lead to its compromise. Hackers use automated tools to guess password.

In this modern era, we use computer, and server to carry a lot of our sensitive data, so keeping work data safe is major priority. Changing the password avoids a number of dangers – including some that are less obvious, such as what happens to the password you have saved on computer you no longer own.

Giving someone a computer with saved passwords is like giving them access to your accounts. Consistently changing your passwords will mean that even if someone has found an old password of yours, it will no longer be relevant or useful.

Process 1.

1. To change your remote server password, press the ctrl-alt-end keys all at the same time on your computer keyboard.
• To change your local computer password, press the ctrl-alt-del keys all at the same time on your computer keyboard.
2. Choose the Change Password option that appears on the screen.
3. The Change Password dialog box will appear. Enter your current password, along with your new password twice.
• Please note that campus passwords for faculty and staff need to be at least 8 characters long, cannot closely resemble a previous password and must contain 3 out of 4 of the following items: lowercase, uppercase, number and symbol.
4. Hit the Arrow button next to the last password box, and your password should be changed.
5. Log Out/Sign Out of the computer and log back in, to verify that your password change has gone into effect.

Process 2.

1. Open notepad
2. Paste this VBScript

Set objShell = CreateObject("Shell.Application") objShell.WindowsSecurity()

3. Click on File
4. Save As
5. Browse your Desktop
6. Name its Password Change.vbs
7. Save
8. Close the text file and go to your desktop and double click on it
9. The Change Password dialog box will appear. Enter your current password, along with your new password twice.
• Please note that campus passwords for faculty and staff need to be at least 8 characters long, cannot closely resemble a previous password and must contain 3 out of 4 of the following items: lowercase, uppercase, number and symbol.
10. Hit the Arrow button next to the last password box, and your password should be changed.
11. Log Out/Sign Out of the computer and log back in, to verify that your password change has gone into effect.

Process 3.

To change a local account password, use these steps:

1. Open Settings
2. Click on Accounts
3. Click on Sign-in options
4. Under the "Manage how you sign in to your device" section, select the Password option
5. Click the Change button




6. Confirm your current password
7. Click the Next button
8. Create a new password
9. Specify a password hint that won't make it easier for others to guess your secret phrase
10. Click the Next button
11. Click the Finish button
12. After you complete the steps, the password will change in your local account

Process 4.

1. Open command Prompt as an administrator
2. Type net user and hit enter to find the username of which you want to change the password for
3. net user username create-a-new-password
• If username is in two part like AJ Tiwari, you need to user inverted comma and then the user name will be like "AJ Tiwari"
4. net user "AJ Tiwari" Admin@123
• If username is Administrator (In one word only), no need to use inverted comma.
5. net user Administrator Admin@123

How to restrict users to shut down or restart the workstation or server?

It is a security policy that is being used by the cloud hosting companies to restrict the user to have a limited permission in order to perfrom a task related to restart of the system.

You can set the permissions to restart or shutdown Windows using the Shut down the system parameter in the Group Policy editor.

1. Open Group Policy Editor
2. Computer Configuration
3. Windows Settings
4. Security Settings
5. Local Policies
6. User Rights Assignment

From the right pane double click on "Shut down the system".

From this box we can add or remove the users and group that we need it to. Once it is done need to sign out from the system and login back so that the changes got applicable.😁

Auto Mouse Mover: Utility to Move Mouse Automatically

Auto Mouse Mover: Utility to Move Mouse Automatically

Auto Mouse Mover Software Utility allows you to move the mouse automatically which prevents your computer from logging off. Auto Mouse Software works with all Windows Operating Systems including Windows 10, Windows 8.1, Windows 2000, Windows 7 and other Windows versions. Auto Mouse mover software allows you to move your mouse after a fixed time that will keep your screen active all the time without logging off the computer.

There are lot more softwares in the market to make it working, but today here I will provide you a script that will allow to move your cursor automatically.

Add-Type -AssemblyName System.Windows.Forms while ($true) { $Pos = [System.Windows.Forms.Cursor]::Position $x = ($pos.X % 500) + 10 $y = ($pos.Y % 500) + 10 [System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point($x, $y) Start-Sleep -Seconds 10 }

We can change the value as per the need like axis (Mathematical language) or direction and also the start-sleep second. As per the need cursor move dimention can be modified.

$x = ($pos.X % 500) + 15

$y = ($pos.Y % 500) + 15

Clipboard setting in Workstation and Server

Clipboard setting in Workstation and Server.

This policy setting determines whether history of Clipboard contents can be stored in memory.

Clipboard history first appeared in Windows 10’s October 2018 Update (Version 1809). Currently, Clipboard history supports text, HTML, and images less than 4 MB in size. Larger items won’t be stored in the history.

Clipboard history stores a maximum of 25 entries, with the oldest items disappearing as new ones appear. Also, unless an item is pinned to the Clipboard, the Clipboard history list will reset every time you restart your computer or device.

The clipboard can save multiple items (text and images) that were copied and sync them across devices. This may inevitably cause your sensitive data appear in the clipboard history. In this tutorial we’ll show you multiple easy ways to disable clipboard history for Windows 10 and Windows server 2012 and on.

Process 1

By using the system setting we can diable the feature of copy and Paste. Open Setting (Windows Key+I) > System > Clipboard > Uncheck the "Clipboard history"

Process 2

By using the system registry this policy can be restricted for a Windows user.

Registry Hive HKEY_LOCAL_MACHINE Registry Path SOFTWARE\Policies\Microsoft\Windows\System Value Name AllowClipboardHistory Value Type REG_DWORD Enabled Value 1 Disabled Value 0

Process 3

For Windows User

1. Local Group Policy Editor
2. Computer Configuration
3. Administrative Templates
4. System
5. OS Policies
6. Allow Clipboard History

As per the need change the setting. And, do reboot of the system to take the effect.

For Windows Server User

1. Local Group Policy Editor
2. Computer Configuration
3. Administrative Templates
4. Windows Components
5. Remote Desktop Services
6. Remote Desktop Session Host
7. Device and Resource Redirection
8. Do not Allow Clipboard History

As per the need change the setting. And, do reboot of the system to take the effect.

Process 4

This is the most important process that you can use for a particular user to make that feature enable or disable. First of all, need to identify the security identifier number (SID) and then proceed accordingly.

Get SID number: - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList

Registry Hive HKEY_LOCAL_MACHINE Registry Path Software\Microsoft\Windows NT\CurrentVersion\ProfileList

Under profile list you will see the so many other keys. You only need to select the key to whom that SSID relates. Once you select the SSID check the right pane the value of Profile image path, and that will help you to understand the SSID number for the user you are looking for.

Once you have the SID number, need to login with the user you want to disable the feature of Clipboard. After logging to that account follow the steps given below to make this working.

Registry Hive HKEY_Users Registry Path SID Number\SOFTWARE\Policies\Microsoft\Windows\System Value Name AllowClipboardHistory Value Type REG_DWORD Enabled Value 1 Disabled Value 0

Hope, this help you a lot and let me knowi if you have any suggesstion.