加固 Windows VPS 的 RDP

保护 Windows VPS 的 RDP。

📋 前提条件

• Windows VPS with Administrator access
• Working RDP (RDP guide)

Enable Network Level Authentication (NLA)

Bash
Set-ItemProperty -Path 'HKLM:\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp' -Name UserAuthentication -Value 1

Create a dedicated admin account

Bash
$user = "RdpAdmin"
$pass = Read-Host "Strong password" -AsSecureString
New-LocalUser -Name $user -Password $pass
Add-LocalGroupMember -Group "Administrators" -Member $user

Firewall: allow RDP only

Bash
Get-NetFirewallRule -DisplayGroup "Remote Desktop" | Set-NetFirewallRule -Enabled True

Account lockout policy

Lock account after several failed attempts via Local Security Policy.

RDP 更安全！🚀