{Defense} 1-Win 2000 sever 3389 security problem solution-

Update all key updates in windowsupdate.microsoft.com, and then note that the administrator password should be mixed with more than 8 digits and letters,
It is best to have a symbol! (This is very important. The symbol is! % # $ & These .), What you need to do is (if you do not need this machine on the LAN
To create a run. BAT file with the following content:
NET Share IPC $/del
NET Share ADMIN $/del
NET Share C $/del
NET Share d $/del
..... You can write several shards and save them to the Startup menu.
Disable RunAs Service, Remote Registry Service, task sheduler, DNS, DHCP, and Other Services manually,
Services such as qouta and daytime must be switched off to avoid DoS attacks. In IIS, The ing of. Ida,. idq, And. printer should be deleted and the Internet access should be filtered out using IPSec.
Question: ports 135, 139, 445, and 3389
Note that if MSSQL is installed, you should change the default SA blank password and the MySQL Root Password.

2. Terminal Service port
Modify the port settings on the server. The Registry must be modified in two places.
First:
[HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control \ Terminal Server \ WDS \ rdpwd \ TDS \ Tcp]
Portnumber value. The default value is 3389. It is changed to a custom port, for example, 6553.
Second:
[HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control \ Terminal Server \ winstations \ RDP-TCP]
Portnumber value. The default value is 3389. It is changed to a custom port, which is consistent with the preceding value, for example, 6553.
When modifying the value, select decimal.