5 Steps to Change Port for RDP

By default, RDP uses port 3389, which is widely known and can expose systems to risks like brute-force attacks and unauthorized access.

To mitigate these vulnerabilities, you can change RDP port to a custom value by following the steps below:

• Choose a new port number within the recommended ranges to avoid conflicts.
• Update Windows Firewall settings to allow the new port.
• Modify the Windows Registry to assign the new port.

If you are starting, buy Cheap RDP to set up a reliable, cost-effective server solution, and follow along to safeguard it effectively.

Step 1:  Choose a New Port to Change RDP Port

By default, RDP listens on port 3389, which is a common target for cyberattacks. To enhance security, select a new port number.

• Recommended Ranges: Choose a port between 49152 and 65535 to minimize conflicts. Alternatively, ensure no other applications are using the selected port.
• Example: For this guide, we will use port 7952.

Step 2: Open the New RDP Port in Windows Firewall

To allow connections through the new port, you need to configure the firewall:

• Open Control Panel > System and Security > Windows Defender Firewall.

• Click on Advanced Settings in the left panel.

• Under Inbound Rules, create a new rule:

• Select Port and click Next.
• Enter your new port number (e.g., 7952) and allow the connection.

• Name the rule (e.g., “New RDP Port”) and save it.

Pro Tip: Add an outbound rule as well for enhanced security.

Note: To properly open your new RDP port in the Windows VPS firewall, follow the steps below or refer to our detailed guide to open a port on Windows VPS firewall for more comprehensive instructions and troubleshooting tips.

Step 3: Change RDP Port in the Windows Registry

This is where you assign the new port to the Remote Desktop service. Consider that mistakes in the registry can cause system issues. Proceed cautiously:

• Press Windows + R, type regedit, and hit Enter.

• Navigate to:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp

• Double-click PortNumber in the right-hand panel.

• Switch the Base to Decimal and replace the default value 3389 with your new port (e.g., 7952).
• Click OK to save the changes and close the Registry Editor.

Important Note:

After modifying the registry, restart your server to apply the new settings.

The next time you connect to your Windows server via Remote Desktop, you must include the updated port number in this format:

<Server IP>:<New Port Number>  
e.g., 192.168.1.10:7952

The Windows firewall is now configured to allow the new RDP port.

Connectivity issues can sometimes persist even after updates; exploring reasons why RDP Server is not connecting can help you uncover potential hidden causes and solutions.

Step 4: Restart the RDP Service and Verify Settings

After completing the above steps to change the RDP port in Windows, you need to restart the Remote Desktop service to finalize the configuration. Here’s how:

• Open the Command Prompt with administrative privileges.
• Run the following commands:

net stop termservice
net start termservice

• Alternatively, you can restart your entire server to apply all changes.

Step 5: Test the New Port and Connect via Remote Desktop

To ensure the changes work as intended, you must test your updated Remote Desktop connection:

• Open your preferred RDP client (e.g., Microsoft Remote Desktop).
• Enter your server’s IP address, a colon, and the new port number. For example:

192.168.1.10:7952

• Click Connect and log in as usual.

→ If you prefer learning through videos, watch our step-by-step guide, which explains how to change remote desktop port quickly and easily.