Cloud Server Security Best Practices – A Practical Checklist

What Are the Most Important Security Steps for a Cloud Server?

Change default credentials immediately. Every newly provisioned server should have all default passwords changed before any data is placed on it. This includes the administrator account, any software management portals, and any default application credentials.

Restrict RDP to specific IP addresses. Configure the firewall to allow Remote Desktop connections only from your office IP and each employee's verified home IP. All other connection attempts are dropped. This single step eliminates the overwhelming majority of automated attack attempts.

Change the default RDP port. Moving RDP from port 3389 to a non-standard port (any port above 10000) eliminates automated scanners that probe default ports. This is not security through obscurity — it works because most scanning tools only probe common ports.

Enable account lockout. Configure Windows to lock accounts after 5 failed login attempts for 15 minutes. Brute-force attacks require millions of attempts; this policy makes them impractical.

Enable two-factor authentication. Microsoft Authenticator provides free 2FA for Windows Server RDP access. Even if a password is compromised, the attacker cannot log in without the user's phone. Recommended for all accounts; mandatory for administrator accounts.

What Should Be Tested Regularly?

Monthly: verify that OS security patches have been applied and backup completion logs show no failures. Quarterly: perform an actual restoration test from backup — restore to a test environment and verify data completeness. Annually: review all user accounts, disable any that belong to former staff, and audit firewall rules for any unnecessary open ports.

M A Global Network includes all of these tasks in managed plan maintenance. Ask our team about your current server's security posture.