{"id":4238,"date":"2026-06-08T17:58:03","date_gmt":"2026-06-08T14:58:03","guid":{"rendered":"https:\/\/support.withsecure.com\/en\/?post_type=support_article&#038;p=4238"},"modified":"2026-06-08T17:58:03","modified_gmt":"2026-06-08T14:58:03","slug":"how-to-secure-remote-desktop-protocol-rdp","status":"publish","type":"support_article","link":"https:\/\/support.withsecure.com\/fi\/support-articles\/how-to-secure-remote-desktop-protocol-rdp\/","title":{"rendered":"How to secure Remote Desktop Protocol (RDP)"},"content":{"rendered":"<h3>Issue:<\/h3>\n<ul>\n<li>RDP Brute Force attack performed and Ransomware encrypted system or files<\/li>\n<li>Technique commonly used by Crysis, Dharma, GandCrab ransomware.<\/li>\n<\/ul>\n<h3>Resolution:<\/h3>\n<ul>\n<li>Use strong and long passwords\n<ul style=\"list-style-type: circle;\">\n<li>To avoid brute force attack on RDP, avoid using Dictionary word and simple password. Always use long password with combination of Uppercase letters, Lowercase letters, numbers and special characters.<\/li>\n<\/ul>\n<\/li>\n<li>Limit number of attempts\n<ol>\n<li>Go to Start&#8211;&gt;Programs&#8211;&gt;Administrative Tools&#8211;&gt;Local Security Policy<\/li>\n<li>Under Account Policies&#8211;&gt;Account Lockout Policies<\/li>\n<li>Account lockout threshold -&gt; Set between 3 to 5<\/li>\n<li>Account lockout duration -&gt; Ideally set more than 5 minutes<\/li>\n<\/ol>\n<\/li>\n<\/ul>\n<ul>\n<li>Only allow user accounts requiring RDP service<\/li>\n<\/ul>\n<ol style=\"margin-left: 80px;\">\n<li>Go to Start&#8211;&gt;Programs&#8211;&gt;Administrative Tools&#8211;&gt;Local Security Policy<\/li>\n<li>Under Local Policies&#8211;&gt;User Rights Assignment&#8211;&gt;Allow logon through Remote Desktop Services<\/li>\n<li>Add or Remove the User accounts or groups which require RDP service<\/li>\n<\/ol>\n<ul>\n<li>Close RDP port\n<ul style=\"list-style-type: circle;\">\n<li>Use VPN connection to access remote desktop and close RDP ports (TCP 3389) access \u00a0via firewall.<\/li>\n<\/ul>\n<\/li>\n<li>Use RD gateway servers\n<ul style=\"list-style-type: circle;\">\n<li>RD gateway proxy servers can be used for securing the connection with SSL.<\/li>\n<li>Read more here : https:\/\/social.technet.microsoft.com\/wiki\/contents\/articles\/10974.windows-server-2012-rds-deploying-and-configuring-rd-gateway.aspx<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Secure Remote Desktop Protocol (RDP) to avoid BruteForce attacks<\/p>\n","protected":false},"template":"","support_article_product":[104],"class_list":["post-4238","support_article","type-support_article","status-publish","hentry"],"acf":{"source_foreign_id":"000005596","source_version":3,"source_system":"salesforce","source_date_updated":"2026-06-08 14:58:03","import_hash":"bd5fec1ce5ed02fa79a80bda708dbbb3a5861227","vanilla_article_id":29658,"vanilla_url":"https:\/\/community.withsecure.com\/en\/kb\/articles\/29658-how-to-secure-remote-desktop-protocol-rdp","vanilla_kb_id":30,"vanilla_category_id":106,"machine_translated":false,"reactions_helpful_yes":0,"reactions_helpful_no":0},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/support_article\/4238","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/support_article"}],"about":[{"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/types\/support_article"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/media?parent=4238"}],"wp:term":[{"taxonomy":"support_article_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/support_article_product?post=4238"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}