Modify remote logon port 3389

The Remote Terminal Service in Windows 2000 is a very powerful service. It also becomes a channel for intruders to stay on the host. Intruders can use some means to obtain administrator accounts and passwords and intrude into the host. Next, let's take a look at how to prevent hacker intrusion by modifying the default port.

As we all know, the remote terminal service is based on port 3389. Intruders usually scan the host to open the port first. Once they find that port 3389 is open, the next intrusion will be performed. Therefore, we only need to modify the default port to avoid the eyes and ears of most intruders.

Step: Open "Start> Run", enter "Regedit", open the registry, and enter the following path: [HKEY_LOCAL_MACHINE/system/CurrentControlSet/control/Terminal Server/WDS/rdpwd/tDS/tcp]. Have you seen the portnamber value? The default value is 3389, which can be changed to the desired port, for example, 6111.

Then open [HKEY_LOCAL_MACHINE/system/CurrentControlSet/control/tenninal server/winstations/RDP-TCP] and change the portnumber value (3389 by default) to port 6111.

After modification, restart the computer and use port 6111 for remote logon.