⚙️ Initial Setup of a Windows VPS

This guide explains the essential steps to perform during the initial configuration of your Windows VPS provided by Infrawire. These actions are crucial to secure your server and ensure its proper operation.

📋 Prerequisites

• A Windows VPS provided by Infrawire
• RDP access to your server (see tutorial Connect via RDP)
• Connection credentials received by email

🔐 Step 1: Change the Administrator Password

Why change the password?

The password provided upon delivery is temporary. It is strongly recommended to change it immediately for security reasons.

Windows Password Requirements

Your new password must contain at minimum :

• 8 characters minimum (recommended: 12 characters or more)
• At least one uppercase letter (A-Z)
• At least one lowercase letter (a-z)
• At least one digit (0-9)
• At least one special character (!, @, #, $, %, etc.)

Example of valid password : MyVPS2024!Secure

How to Change the Password

Method 1: Via Windows Settings

1. Connect to your Windows VPS via RDP
2. Press Windows + I to open Settings
3. Go to Accounts → Sign-in options
4. Click on Password → Change
5. Enter your current password
6. Enter your new password (meet complexity requirements)
7. Confirm the new password
8. Click Next then Finish

Method 2: Via Ctrl + Alt + Del

1. Connect to your Windows VPS via RDP
2. Press Ctrl + Alt + Del (or Ctrl + Alt + End in an RDP session)
3. Select Change password
4. Enter your current password
5. Enter your new password (meet complexity requirements)
6. Confirm the new password
7. Click the arrow or press Enter

Method 3: Via PowerShell (Administrator)

1. Right-click on the Start menu
2. Select Windows PowerShell (Administrator) or Terminal (Administrator)
3. Run the following command (replace NewPassword123! with your password) :

$user = "Administrator"
$password = ConvertTo-SecureString "NewPassword123!" -AsPlainText -Force
Set-LocalUser -Name $user -Password $password

Verification

After changing the password:

1. Disconnect from your RDP session
2. Reconnect with the new password
3. If the connection works, the change was successful!

🔄 Step 2: Update Windows

Why Update Windows?

Windows updates bring:

• Security fixes : Patches for discovered vulnerabilities
• Stability improvements : Bug fixes
• New features : System improvements

Check for Available Updates

1. Press Windows + I to open Settings
2. Go to Update & Security → Windows Update
3. Click Check for updates
4. Windows will search for available updates

Install Updates

1. If updates are available, click Download and install
2. Wait for download and installation to complete
3. If Windows asks for a restart, click Restart now
   • ⚠️ Important : Save your work before restarting
4. After restart, reconnect and check if there are more updates
5. Repeat until no more updates are available

Automatic Update Configuration (Recommended)

To have Windows automatically install security updates:

1. In Settings → Update & Security → Windows Update
2. Click Advanced options
3. Enable Restart this device as soon as possible after an update
4. Configure Active hours to avoid restarts during your working hours

🛡️ Step 3: Configure Windows Firewall

Windows Firewall is enabled by default, but it's important to check its configuration.

Check Firewall Status

1. Press Windows + R
2. Type wf.msc and press Enter
3. Verify that Windows Defender Firewall is enabled for profiles:
   • Domain
   • Private
   • Public

Recommended Firewall Rules

By default, RDP (port 3389) should already be allowed. Check:

1. In Windows Defender Firewall, click Inbound Rules
2. Verify that a Remote Desktop rule exists and is enabled
3. If you install applications (web server, database, etc.), you will need to create rules for their ports

🔒 Step 4: Disable Unnecessary Accounts

Check User Accounts

1. Press Windows + R
2. Type lusrmgr.msc and press Enter
3. Go to Users
4. Check the accounts present

Disable Guest Account (if enabled)

1. In Computer Management → Local Users and Groups → Users
2. If the Guest account exists and is enabled, right-click on it
3. Select Properties
4. Check Account is disabled
5. Click OK

🔐 Step 5: Configure Password Policy

To strengthen security, you can configure stricter password policies:

1. Press Windows + R
2. Type gpedit.msc and press Enter
   • ⚠️ Note : This feature is only available on Windows Server or Windows Pro
3. Go to Computer Configuration → Windows Settings → Security Settings → Account Policies → Password Policy
4. You can configure:
   • Maximum password age : Forces periodic password changes
   • Minimum password age : Prevents too frequent changes
   • Minimum password length : Increases required minimum length
   • Password must meet complexity requirements : Already enabled by default

🔄 Step 6: Configure Automatic Updates (Optional)

For a production server, you can configure Windows Update via Group Policy:

1. Press Windows + R
2. Type gpedit.msc and press Enter
3. Go to Computer Configuration → Administrative Templates → Windows Components → Windows Update
4. Configure settings according to your needs:
   • Configure Automatic Updates : Enable and choose the mode (notification, download, automatic installation)
   • Schedule Automatic Restarts : Configure restart hours

✅ Initial Setup Checklist

After following this guide, your Windows VPS should have:

• ✅ Administrator password changed (complex and secure)
• ✅ Windows up to date (all updates installed)
• ✅ Windows Firewall enabled and configured
• ✅ Unnecessary accounts disabled
• ✅ Security policies configured (optional)

📝 Important Notes

• Save your new password in a secure password manager
• Never share your administrator credentials
• Perform regular updates to maintain security
• Monitor logs to detect potential intrusion attempts

📞 Need Help?

If you encounter difficulties during initial setup, please contact Infrawire support. Our team is available to help you.

---

Note : These configurations are essential for your server's security. Don't neglect these steps, especially changing the administrator password.