How to set up RDP brute-force protection on Windows Server
A complete, step-by-step walkthrough — from creating an account to a server that blocks brute-force attacks on its own. No config files and no command line: it takes just a few minutes.
Before you start
- A Windows server or PC (Server 2012 R2–2025, Windows 8.1/10/11) where you have administrator rights.
- Outbound HTTPS access so the agent can reach the panel — inbound ports stay closed.
- The RDP (and optionally FTP) service you want to protect running on that host.
Set up RDP brute-force protection in a few steps
- 1
Create your account
Sign up with email or through Google/GitHub — no credit card needed. The Free plan protects one server for good.
- 2
Download your personal installer
In the panel, open Add server and download the signed installer. Your access token is already embedded, so there is nothing to type in.
- 3
Run it on the server
Copy the installer to the server, run it and confirm the UAC prompt. The agent detects the RDP/FTP ports on its own and whitelists your current IP so you can never lock yourself out.
- 4
Confirm the server is online
Within seconds the server appears as Online on the Servers page and starts blocking attackers with safe default settings.
- 5
Tune the protection policy
Open Policies to adjust the attempt threshold, ban duration, subnet (CIDR) bans, geo rules and cross-tenant reputation — or keep the sensible defaults.
- 6
Manage it day to day
Use Whitelist for trusted IPs and temporary access, watch Blocked IPs and Statistics, set up Notifications, and invite your team or add more servers as you grow.
What you can do next
- Add more servers from the same panel and manage them together.
- Grant contractors temporary, time-boxed access without sharing passwords.
- Invite teammates and assign roles from the Team section.
- Review the audit log and export statistics whenever you need them.
Ready to protect your server?
Create a free account and have your first server protected in minutes.