WESERVER / KNOWLEDGE BASE

How to connect to a Windows VDS with Remote Desktop (RDP)

You reach a Windows Server VDS with Remote Desktop Connection (mstsc), the server IP and an administrator account. Steps for Windows, macOS, Linux and phones, port tests, common errors and hardening.

Short answer

To connect to a VDS running Windows Server, open Remote Desktop Connection (mstsc) on your computer, type the server’s IP address in the Computer field and sign in with the administrator username and password. RDP uses TCP port 3389 by default.

For example, if the IP is 203.0.113.10, press Win + R and run mstsc /v:203.0.113.10. On WeServer VDS, Windows Server instances are accessed over RDP and Linux servers over root/SSH. If you run a Linux VDS, see the guide on connecting over SSH.

What do you need for an RDP connection?

Have these ready before you connect:

  • The server’s public IPv4 address
  • The administrator username: usually Administrator on Windows Server images; use whatever your server handover details list
  • The password for that account
  • The RDP port: 3389 by default, or the number you changed it to
  • An RDP client: the built-in Remote Desktop Connection on Windows, Microsoft’s Windows App on macOS and phones, Remmina or FreeRDP on Linux

How do you connect from Windows with Remote Desktop Connection?

The client comes preinstalled on Windows 10 and 11. Follow this order:

  • Type “Remote Desktop Connection” in the Start menu, or press Win + R and run mstsc
  • Enter the IP address in the Computer field; if the port is not 3389, append it after a colon: 203.0.113.10:3390
  • Click Show Options and enter Administrator as the user name; since it is a local account, .\Administrator also works
  • Click Connect and enter the password
  • On the first connection you will see “The identity of the remote computer cannot be verified”. That is expected because the server uses a self-signed certificate; if the IP is correct, choose Yes
  • Once the desktop appears you are in. Closing the window with X leaves the session running on the server; to sign out completely, use Start → Sign out

How do you connect over RDP from macOS, Linux or a phone?

On macOS, install Microsoft’s Windows App (formerly Microsoft Remote Desktop) from the App Store. Use Add PC, put the IP address in PC Name, and add Administrator and the password as the user account. On iPhone, iPad and Android you enter the same details in Microsoft’s official remote desktop app.

On Linux, Remmina is a convenient graphical option: create a connection, pick RDP as the protocol and enter the server, user and password. From the command line you can use FreeRDP: xfreerdp /v:203.0.113.10 /u:Administrator. On some distributions the FreeRDP 3 command is called xfreerdp3.

How do you test whether the RDP port is open?

If the connection fails, first check whether the port is reachable from outside. In Windows PowerShell, run Test-NetConnection 203.0.113.10 -Port 3389. If the output shows TcpTestSucceeded : True, the port is open and the problem most likely lies in the credentials or client settings. If it returns False, packets are not reaching the server or nothing is listening there.

On macOS and Linux, run the same check with nc -vz 203.0.113.10 3389. If the server has just started or is rebooting after updates, wait a few minutes and try again; the RDP service may not respond while Windows updates are being applied.

How do you move files and clipboard content to the server?

In Remote Desktop Connection, go to Show Options → Local Resources. With Clipboard ticked, copy and paste works in both directions, and you can move small files that way too. For larger transfers, click More… on the same tab and tick Drives. The local drive you choose shows up under “This PC” in File Explorer on the server.

A shared drive is readable from the server while the session is open. Keep drive sharing off when you connect to a server you do not trust.

How do you fix RDP connection errors?

The messages you will see most often, with causes and fixes:

  • “Remote Desktop can’t connect to the remote computer”: the server cannot be reached. Check the IP and port, run the port test, and make sure the server is running and Windows Defender Firewall is not blocking the RDP rule.
  • “Your credentials did not work”: the username or password is wrong. Try the user name as .\Administrator and check that your keyboard layout is not changing the password. If an old password is saved, delete it under Show Options and enter it again.
  • “An authentication error has occurred… CredSSP encryption oracle remediation”: the client and server are at different update levels. The lasting fix is to install current Windows updates on both sides; relaxing the security policy is only a temporary workaround.
  • “The remote computer requires Network Level Authentication”: your client does not support NLA or is very old. Use a current client; turning NLA off on the server widens the attack surface.
  • “The remote session was disconnected because there are no Remote Desktop License Servers available”: the Remote Desktop Services (RDS) role was installed and its grace period has expired. Removing the role takes you back to the standard two admin sessions; if you need more users, you have to configure RDS licensing.
  • “An internal error has occurred”: usually a stuck service or an unfinished update on the server. Wait a few minutes; if it persists, restart the server.

How do you harden RDP on a Windows VDS?

Any server with port 3389 open to the internet will see automated password-guessing scans. These steps reduce that risk considerably:

  • Use a long, unique password and do not reuse it for other services
  • Keep Network Level Authentication (NLA) on: the checkbox on the Remote tab of System Properties
  • Set an account lockout policy; for example, net accounts /lockoutthreshold:5 locks the account temporarily after five failed attempts
  • If you connect from a fixed IP, limit the RDP rule to that address: Set-NetFirewallRule -Name RemoteDesktop-UserMode-In-TCP -RemoteAddress 198.51.100.25. If your home IP changes, this step can lock you out
  • Install Windows updates regularly; RDP vulnerabilities are mostly closed through updates

How do you change the RDP port?

Changing the port cuts down log noise from automated scans but offers no real protection on its own. If you do it, keep the order: open the new port in the firewall first, then move the service. Open PowerShell as administrator and run these three commands in sequence (example port 3390):

  • New-NetFirewallRule -DisplayName "RDP 3390" -Direction Inbound -Protocol TCP -LocalPort 3390 -Action Allow
  • Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" -Name PortNumber -Value 3390
  • Restart-Service TermService -Force
  • Your current session drops while the service restarts. Then connect with mstsc /v:203.0.113.10:3390; once the new port works, you can disable the old 3389 rule

How many people can connect over RDP at the same time?

Windows Server allows two simultaneous remote desktop sessions for administration without extra licensing. When a third user tries to connect, one of the open sessions has to be ended. If more people need to work on the same server, you need the Remote Desktop Services role plus an RDS client access licence (CAL) per user or per device.

Giving each person their own Windows account works better than sharing the Administrator account: you can see who did what, and when someone leaves you close only their account. On WeServer, Windows Server options are confirmed based on stock and licensing scope, so verify current availability before ordering.

Frequently asked questions

Do programs on the server stop when I close the window? No. Closing with X only disconnects; the session and its programs keep running, and you pick up where you left off when you reconnect. Sign out if you want the programs closed.

Is an RDP connection encrypted? Yes, current clients and servers encrypt the traffic with TLS. Leaving the port open to everyone still does not stop password-guessing attacks, so an IP restriction or a VPN adds another layer.

What can I do if the connection is slow? On the Experience tab of Remote Desktop Connection, turn off the desktop background and visual effects, and lower the colour depth on the Display tab. Allowing UDP 3389 in the firewall as well lets the client use UDP transport.

Can I connect to a Linux VDS over RDP? It is possible if you install software such as xrdp along with a desktop environment, but Linux servers are usually managed over SSH and a graphical desktop uses extra resources.

What if I forget the administrator password? If you cannot get in over RDP, the password has to be reset from inside the server. That needs console access from the provider or help from its support team; keeping the password in a password manager avoids the situation altogether.

Browse related productsAsk on WhatsApp← Back to category

RELATED

Related articles

ALL IN WE1

Let’s build your infrastructure.

Share your requirements and we will help you choose the right resources and server type.

Talk on WhatsApp