Windows remote Desktop: Port number change & specify IP connection

Due to work needs, it is often necessary to use remote Desktop to connect to the Windows server. The default remote desktop port number of Windows is 3389. In order to increase server security, in addition to making rules in hardware devices, you can also use the policy that comes with Windows to increase the security of Windows servers.

Take Windows2008R2 as an example, set two policies respectively: (either of the two can not take effect at the same time)

Remote Desktop Port number change

Advanced Firewall specifies IP connection

The first way: remote Desktop port number change

There are two changes to the registry, and the first path is as follows

HKEY_LOCAL_MACHINE\ SYSTEM\ CurrentControlSet\ Control\ Terminal Server\ Wds\ rdpwd\ Tds\ tcp----PortNumber

(1) enter the registry, follow the above path, find PortNumber, and change the default 3389 to something else.

(2) the port number has been changed to 52113.

The second path is as follows

HKEY_LOCAL_MACHINE\ SYSTEM\ CurrentControlSet\ Control\ Terminal Server\ WinStations\ RDP-Tcp----PortNumber

Change the port number here to the same as above

The second way: the firewall setting only allows a certain IP connection

(1) turn on the firewall, start-run (win+ r key), and enter "wf.msc"

(2) in addition, configure the "public network", as shown below

At this point, the server is set to allow only 10.3.20.36 access through remote desktops. No other machines can be connected