CloudFlare Flexible SSL Redirect Loop Fix For WordPress / IIS

So you are hosting a WordPress Blog running on IIS (Internet Information Services) which is behind CloudFlare CDN (Content Distribution Network) and you want to enable CloudFlare’s free Flexible SSL so your WordPress Blog can be accessed over https. You have tried to set this up, however have ended up with an annoying a redirect loop leaving your WordPress Blog inaccessible, here is how to fix that redirect loop.

CloudFlare Flexible SSL Setup for WordPress Running On IIS:

  1. Log in to CloudFlare and find your domain
  2. Click the settings cog next to it and select “Cloudflare Settings”
  3. Scroll down to SSL and enable Flexible SSL


Next in your WordPress Admin Panel:

  1. Go to Settings
  2. Change your blogs URL’s from http:// to https://


You will have now forced WordPress to use https:// however you will find you now have the infamous redirect loop error.

Fix WordPress / CloudFlare Flexible SSL Redirect Loops:

  1. Open your wp-settings.php file and find the line which says require_once(ABSPATH . ‘wp-settings.php’)
  2. Before this line add the following code:
// Force Admin Login To SSL
define('FORCE_SSL_ADMIN', true); 
// CloudFlare SSL Fix
else {
$_SERVER['HTTPS'] = false;
define('WP_SITE_URI', ($_SERVER["HTTPS"]?"https://":"http://").$_SERVER["HTTP_HOST"]);
define('WP_SITEURI', ($_SERVER["HTTPS"]?"https://":"http://").$_SERVER["HTTP_HOST"]);
define("WP_CONTENT_URL", WP_SITE_URI . "/wp-content");                   
define("WP_CONTENT_URL", WP_SITE_URI . "/wp-content");

Add these after the require_once(ABSPATH . ‘wp-settings.php’) line:

wp_cache_set("siteurl_secure", "https://" . $_SERVER["SERVER_NAME"], "options");
wp_cache_set("home", WP_SITE_URI, "options");
wp_cache_set("siteurl", WP_SITE_URI, "options");

That should fix your WordPress / Cloudflare redirect loop problems when accessing your WordPress blog from behind Cloudflare, now you simply need to force all connections to your blog to use https, to do this:

  1. Log in to CloudFlare and find your domain
  2. Click the settings cog next to it and select “Page Rules”
  3. Select always use https
  4. enter ** for the rule patterns, in this example i entered **
  5. Click add rule


All your old http:// url’s will now 301 redirect to the https:// URL’s.

The 301 redirect tells Google and other search engines that the page has moved permanently.

Note: if you do not wish to force https on sub domains enter* for the page rule on Cloudflare instead.

That’s it, your WordPress Blog should now be working fine with CloudFlare Flexible SSL.

You can test your SSL setup with Qualys SSL Test, got a grade “A” test result, which is the highest you can obtain.


OpenVPN Install / Setup on a £2 VPS

In today’s world online privacy, regional blocks and censorship is becoming more and more of an issue. A lot of VPN services are appearing which aim to allow people to be anonymous when browsing the internet. However these VPN services present a few problems.

The first is you have no idea what data is really logged, or even if anyone is snooping on what you are doing, the second is the cost. Often VPN services can be quite expensive and have limits on the amount of data that can be used each month.

So what can you do?

Well its very easy to set-up a secure VPN server on a Linux VPS (Virtual Private Server). On a VPS you have full root access, meaning you can do what you want and control who has access to the VPS. A basic VPS server can cost you as little as £2 a month, which is not a lot compared to paying for a VPN provider.

In thus tutorial we are going to be using the most basic VPS from OVH, the VPS Classic 1.

Link: VPS Servers from OVH

The VPS Classic 1 has:

  • 1x CPU core
  • 1gb of ram
  • 10gb of storage space
  • 1x IPv4 and 1x IPx6 static address, with all ports open
  • 100mbps connection

This is more than enough to run an Open VPN access server

Installing Open VPN Access Server on a VPS:

Usually when purchasing a VPS you will get a choice of =operating system you wish to install, for the purpose of this tutorial I have used Ubuntu 14 64bit.

To connect to the VPS we will use SSH, on Windows we need an SSH client such as Putty, on OSX or Linux you can simply use the terminal.

Once connected to the VPS via SSH you want to download the OpenVPN access server, to do this type

wget of the source

Note: The latest versions of OpenVPN Access Server can be found here, simply right click on the download link from your browser and select copy link address, you can then paste that in to your VPS to download directly on the VPS.



Once downloaded you want to type the following command to install Open VPN Access Server

sudo dpkg -i openvpn-as-2.0.11-Ubuntu14.amd_64.deb

Note the file name will change slightly with newer versions of Open VPN Access Server


You should then see some links in the Terminal whcih say Access Server web UIs are available here:

Admin UI:
Client UI:


We now need to set a password for the openvpn user, so type

passwd openvpn

You will then be asked to enter a new password, and confirm the new password. You will need to remember this password.


Next you want to open the Admin UI link in your web browser so go to the link that is show, in thix example that’s

Please note the https:// if you simply type http:// you will not get the admin interface.

As you are connecting to a secure site without a secure certificate you will be warned, this is normal and its perfectly save to visit the site. After all you are the person running the site so you know this!


Next you will be asked for a username and password, the username is openvpn and the password is what ever you previously set for the “openvpn” user in the terminal. Enter these to log on to the OpenVPN web ui


You will then have to accept the end user licence agreement:


You should now see the admin interface for your OpenVPN server, here you can manage users, configure additional options and start / stop the server.

By default you get a licence for two users, which for a personal VPN i think is more than enough. If you wish to allow any more users to access the server then you will have to purchase a licence.

OpenVPN Access Server is actually pretty secure out the box, however at the end of this tutorial i will give you some tips / settings i have changed.


You are now ready to connect to the VPN, so log on to the client UI URL which was listed in the terminal earlier on, in this example it is

Here you want to enter the username, password and select connect.


You will then be presented with a personalised download of the OpenVPN client, complete with settings for the user account you logged on with to connect to the VPN.


Save this to somewhere easy to find, such as your desktop


After the download has finished or if you refresh the page you will be given an option to download the OpenVPN Connect app for a variety of different platforms.


Once the OpenVPN connect app has been installed you can log on to the app with your username and password:


I tick the box which mensions “dont ask again” about the unverified connection.


You will then be connected to the VPN:


To check all your internet traffic is going through the VPN simply type in to Google “What is my IP” and Google will tell you the IP address you are accessing it from:

This should be the IP address of your VPS OpenVPN Access Server is running on:


Despite going through a VPN the speed of my internet connection is still lightning fast:


In comparison this is a speedtest of my internet connection without using a VPN:


My download speed is still significantly faster, however the connection speed on the VPS is limited to 100Mb/s, so i pretty much maxed the connection on the VPS out. For £2 a month i dont think you can really go wrong!

So that’s basically it, you now know how to setup a secure VPN server on a VPS. You can now purchase a VPS in any country of the world depending on where you want websites to think you are accessing the internet from. For example if you wanted to access the BBC iPlayer from outside the UK, you would want to get a VPS located within the UK, however if you wanted to access american services like Hulu then you would want a VPS located in America. You might even want a VPS located in Japan if you wish to buy region restricted content or games on the Xbox 360 for example.

If all you want to do is browse the internet securely on public Wi-Fi then then it doesnt matter too much where you purchase a VPS, however the closer to you the better if you want to be downloading large files.

My OVH VPS is located in France and in the UK i can almost get the full 100mbps through the VPN so i’m more than happy with that.

Additional OpenVPN Configuration Options:

If you wish to access your VPN from behind a restrictive firewall it’s worth changing the ports OpenVPN ruins on to 443. This is the secure https port so is very unlikely to be blocked, even by the most restrictive of firewalls:


I would also personally create a new user account and delete the old OpenVPN account once you are happy the new user account is working, this is just personal preference more than anything. I personally just don’t like using the default user accounts if it can be helped .


Hopefully this quick tutorial has proved useful to you and shows just how easily you can setup a secure VPN up on a Cheap VPS.

If you have any questions ill try my best to help.

Kimsufi Windows Install Guide (KS1 / KS2) – OVH Server

Welcome to my Kimsufi Windows Install Guide. OVH have some very cheap entry level dedicated servers which are branded under the Kimsufi name. The KS1 server which is currently £5 a month including VAT gets you a:

  • Atom N2800 @1.86ghz Processor (2 cores, 4 threads)
  • 2GB DDR3 ram
  • 500GB sata hard drive
  • 100mbps connection
  • 1x IP V4 address
  • Alternatively for £10 a month you can get the same server with 4GB of ram and a 1TB hard drive (KS2 Server)

The only choice of OS for these server however is limited to Linux, OVH used to let you use your own Windows licence, however this is not an option any more.

Not all is lost however, all OVH / Kimsufi servers offer a Linux based rescue system. This is where the servers hard drive is essentially mounted inside a Linux Live CD so you can perform diagnostics or troubleshoot any problems. As the OVH rescue system system gives direct access to the servers hard drive we can use this to deploy a sysprepped Windows install over the internet. Combined with an unattend.xml file this sysprepped Windows install is enough to deploy Windows Server 2012 R2 on the Kimsufi KS-1 and KS-2 servers and have it connected to the internet with Remote Desktop access enabled when the server boots. Esentially think of this tutorial as showing you how to install Windows on a server, remotely over the internet.

In this Kimsufi Windows Install tutorial we are going to:

  1. Install Windows Server 2012 R2 in a Virtual Machine
  2. Configure our installation in the Virtual Machine so Remote Desktop is enabled and windows firewall will allow connections to remote desktop from the internet
  3. Sysprep the Windows install, this is so Windows will boot and setup new hardware once deployed to our real Kimsufi server
  4. Still in the Virtual Machine, we will boot a Linux Live CD to image the Windows install with dd.
  5. Finally will deploy the sysprepped Windows image we made with dd over the internet to the Kimsufi server, via the OVH Linux recovery system.

This might sound quite complex, however its actually quite easy when broken down in to steps.

Some thing to keep in mind:

You will have to upload at least a 4gb compressed image of a Windows Server install from your home connection to your OVH server. Be aware this can take a long time depending on your internet connection’s upload speed.

For me it took around an hour to upload just over 4gb with a 12mbps upload, if you had a 1 mbps upload speed that could take you well over 8 hours, so be warned that might be the most time consuming part of this tutorial for you.

Why Install Windows Server on an Intel Atom Based Device?

You might think why install Windows Server on such an under powered server, especially considering the cost of a Windows Server licence?

Well Microsoft give free Windows Server 2012 R2 licences to students via Dreamspark, all you really need is a college / university email address and you can gain access to some great software via Dreamspark. This is where the Kimsufi server comes in, I think its the perfect server to install a copy of Windows Server on, to learn and experiment with the OS. Despite been quite low powered the Atom N2800 is more than capable for this task. The server will have it’s own unique IPv4 and IPv6 address on the internet, so you could deploy an application in the real world using IIS, or even experiment with setting a VPN up. The 2gb of ram is more than enough for this purpose, and to be honest that’s how i ended up starting with this blog. I wanted something to share with the world when I was experimenting with IIS and Windows Server. The 100mbps connection and 500gb of hard drive space are a nice bonus too!

Before we begin:

I have tried to make this tutorial as detailed as possible and explain the best I can, providing screenshots of what i’m doing. However some basic knowledge of Windows, Linux, Drivers, Networking and Virtual Machines will be a great benefit to you.

This guide is aimed at the OVH / Kimsufi KS1 and KS2 Servers, however the same principles basically apply to any OVH server.


Kimsufi Windows Install Guide – Install Windows Server 2012 R2 on OVH’s Kimsufi KS1 / KS2 Server:

When you get the Kimsufi KS1 / KS2 server you will have to choose an OS to install on it. You will get an email with a link to log in the server manager and do this. For the OS I chose Ubuntu Server, we can easily get the hardware, such as what network card is in the server by using Ubuntu. Once Ubuntu is installed you will get an email with details to connect to the server via SSH:kimsufi-linux-install-1

Now you simply want to use Putty to SSH in to the server.

Once you have SSH access simply type:

lshw -C network

You should then be able to find out what network card is present in your server. Windows Server 2012 R2 has drivers out the box for the Intel 82574L so we do not need to worry about this later on. However depending on your network card you might need to find drivers for use on Windows.


With the current Kimsufi servers it’s easy to tell which network card the server has by the processor that’s in it, however by knowing the above you can easily find out in the future when the server hardware will no doubt change.

Atom N2800 = Intel 82574L (Both Windows Server 2008 R2 and Windows Server 2012 R2 have drivers natively for this)
Atom D425 = RTL8101E/RTL8102E (Windows Server 2008 R2 does not have drivers, Windows Server 2012 R2 might) – Drivers can however be downloaded from here: RTL8100E/RTL8101E/RTL8102E-GR/RTL8103E(L) Drivers

Installing Windows Server 2012 R2 in a Virtual Machine:

It doesn’t really matter what software you use to run a Virtual Machine. I used VmWare ESXI, however that requires a dedicated machine to run on. VmWare Player would be fine as the options are similar to ESXi which i use in this tutorial, as would VirtualBox.

You want to create a Virtual Machine with similar specifications to your Kimsufi server and then install Windows on this Virtual Machine. I simply assigned 2GB of ram to the virtual machine and 1x CPU with 4x Cores.


In VmWare ESXi you have the choice between BIOS and UEFI for the Virtual Machine boot options, i chose BIOS as that’s what the Kimsufi server uses. I’m not sure how much this matters anyway when sysprepping a Windows install, however i tried to keep the hardware of the virtual Machine similar to what is in the real Kimsufi server.


Now install Windows Server 2012 R2 as you normally would in the Virtual Machine.

Use one of the following default keys to allow Windows to install, however not activate:

Datacenter: Y4TGP-NPTV9-HTC2H-7MGQ3-DV4TW
Essentials: K2XGM-NMBT3-2R6Q8-WF2FK-P36R2

You do not want to use your legit and valid key until you have Windows running on your Kimsufi server, otherwise you will end up activating the Virtual Machine, which will cause you issues with activation later on.

Once Windows Server 2012 R2 is installed you can set an Administrator password (remember this!). You then want to do a couple of things before we sysprep the image for deployment on the Kimsufi server.

First enable remote desktop:

Right click on Computer > Properties > Advanced System Properties > Remote

Then enable “Allow remote connections to this computer”:


Allow Remote Desktop Connections in Windows Firewall:

Go to Control Panel > Windows Firewall > Advanced Settings and enable:

  • Remote Desktop – User Mode (TCP-In)
  • Remote Desktop – User Mode (UDP-In)
  • Remote Desktop – Shadow (TCP-In) (This is optional)

Do this for both public and domain profiles to ensure Windows Firewall does not lock us out the server later on.


Allow the server to be pinged in Windows Firewall:

Go to Control Panel > Windows Firewall > Advanced Settings and enable:

  • File and Printer Sharing (Echo Request) IMCP V4 In
  • File and Printer Sharing (Echo Request) IMCP V6 In

This is handy so we can ping the server and is required if you wish for the OVH manager to monitor the server.


Disable Windows Error Recovery On Startup:

Disabling Windows Error Recovery will prevent the system getting stuck when starting up.

Open a Command Prompt with Administrator rights (Right Click > Run as Administrator) and type:

bcdedit /set {current} bootstatuspolicy ignoreallfailures


Setup the unattend.xml file:

The easiest thing to do here is download my unattend.xml file and edit it as required in Notepad++. This unattend.xml file is for the English language version of Windows Server 2012 R2 and will probably not work with other versions of Windows.

Essentially if you have a non English language version of Windows Server you will need to edit the:

  • InputLocale
  • SystemLocale
  • UILanguage
  • UserLocale

You would change this to match the language of your copy of Windows Server 2012 R2. You can’t leave the settings as they are for a French version of Windows for example.

If you have the English version of Windows Server 2012 R2 all you need to edit here is the password for the Administrator account, set this to be the same as the password currently is currently on your Virtual Machine:


Now copy the unattend.xml to c:\windows\panther and c:\windows\system32\sysprep


You are now basically ready to sysprep your Windows Install to be deployed to the Kimsufi server. Now you can do any other customizations you wish to make can be made. However keep in mind if you start installing apps, updating Windows or setting things up, the larger the image you have to upload will be. My advice would be to update Windows and install things once you have deployed the image to the Kimsufi server.

If you need to install additional drivers for your server now would be the time to do it:


If you get a Kimsufi server at the moment with the Atom N2800 processor I can confirm that you do not need to install any additional drivers for the Kimsufi KS1 and KS2 server to get Windows Server 2012 R2 setup and working.

Syspreping our Windows Server 2012 R2 install:

Sysprep can be used to prepare an operating system for disk cloning and restoration via a disk image.

Windows operating system installations include many unique elements per installation that need to be “generalized” before capturing and deploying a disk image to multiple computers. Some of these elements include:

  • Computer name
  • Security Identifier (SID)
  • Driver Cache

Sysprep solves these issues by allowing the generation of new computer names, unique SIDs, and custom driver cache databases during the Sysprep process.

To sysprep you Windows Server 2012 R2 Virtual Machine you need to open a Command Prompt with Administrator rights and type:

cd \windows\system32\sysprep


sysprep /generalize /OOBE /shutdown /unattend:unattend.xml


Window will now sysprep and the Virtual Machine will shutdown once this is complete.


Note: It’s very important you do not boot in to Windows again on this Virtual Machine. If you do then you will have to sysprep the Virtual Machine again.

You now need a computer or Virtual Machine on your network running Linux:

If you have a server on your local network running Linux then all you need to be able to do is SSH in to this computer to continue with this tutorial. This computer must have enough hard disk space to recicve a compressed DD image of your Windows Virtual Machine that we just setup. My image was around 4gb, this will however vary depending on what you do with your Windows Server 2012 R2 VM.

**This part of the tutorial is optional if you have a computer running a variation of Linux on your network**

If you don’t have a computer running Linux then I would download a copy of Ubuntu Desktop and install this in another Virtual Machine.

Once installed open up a Terminal. To Install OpenSSH type in:

sudo apt-get install openssh-server



We will need to connect to connect this computer / Virtual Machine via SSH later on to store the DD image of our Windows VM.

Once OpenSSH is setup you simply need to make a note of this computer / Virtual Machine’s IP address

Simply type:

ifconfig eth0

Then make a note of the IP address:



Making an image of the Windows Server 2012 R2 Virtual Machine with DD:

With your Windows Server 2012 R2 Virtual Machine powered down you want to mount a Linux Live CD ISO in the Virtual Machines CD drive. For this i used the Desktop version of Ubuntu.


You then simply want to ensure the Virtual Machine is set to boot from the CD drive, or set the Virtual Machine to boot in to the BIOS when next started so you can change the boot order making the CD drive the first boot option:


Basically you want your Windows Server 2012 R2 virtual machine to boot the Ubuntu Desktop ISO. When it does click “Try Ubuntu” and you will end up at the Ubuntu Desktop with the Windows hard drive mounted.


When you have successfully the Ubuntu Live CD you need to open up a Terminal and type:

sudo dd if=/dev/sda bs=16M | xz -1 | ssh -p 22 matt@ "dd of=/home/matt/windows1.dd.xz bs=16M"
  • matt = this is the user account on the Ubuntu Desktop Virtual Machine you set-up (or the existing Linux machine on your network)
  • = this is the IP address of the Ubuntu Desktop Virtual Machine you set-up (or the existing Linux machine on your network)
  • /home/matt/ = this is your home folder on the Ubuntu Desktop Virtual Machine you set-up, change /matt/ to what ever your username is on the Linux machine.

All been well you will be asked to enter the password to connect to your Ubuntu Desktop Virtual Machine, from the Ubuntu Live CD which is running on your Windows Server 2012 R2 Virtual Machine:


The hard drive of your syspreped Windows Server 2012 R2 install will now be compressed and transferred to your Ubuntu Desktop Virtual Machine. This took around 40 mins for me.

On your Ubuntu Desktop Virtual Machine (Or Linux machine on your network) you should end up with a file called windows1.dd.xz in your home folder:


If so congratulations you have imaged your Windows Server 2012 R2 install, and it is now ready to deploy to your Kimsufi server.

Deploying The Windows Server 2012 R2 Syspreped Hard Drive Image To The OVH / Kimsufi Server:

Log in to your Kimsufi server manager account at

First you want to disable server monitoring and then click “Netboot”:


You want the server to boot in to “Rescue”:


Now back in the Main Menu of your server manager click “Restart”:


The server will boot in to the Linux rescue mode and you will be sent an email with the ip address, username and password to connect over SSH on.


Now everything is in place to allow us to deploy the sysprepd image of Windows Server 2012 R2 we have backed up and compressed with dd.

On our Ubuntu Desktop Virtual Machine (Or the Linux computer on your network) we are going to upload this image to the Kimsufi server via SSH and deploy it to the servers hard drive.

TOpen up a terminal Window and type:

dd if=/home/matt/windows1.dd.xz bs=16M | ssh -p 22 [email protected] "xz -d | dd of=/dev/sda bs=16M"
  • /home/matt/ = matt would be your username
  • = this would be the ip address you got in the email to connect to your server in rescue mode

You will be warned the authenticity of host ‘ (’ can’t be established.
RSA key fingerprint is 27:a8:e3:f2:69:1a:bc:f9:49:03:90:b8:a4:7d:39:fd.
Are you sure you want to continue connecting (yes/no)?

Say yes here and all been well your image should start to upload over the internet to your Kimsufi server:


By default you will notice it looks like nothing is happening, however i can assure you it is.

If you open another terminal and type in:

watch -n60 'sudo kill -USR1 `pgrep ^dd`'


The speed of the transfer and the amount of data transferred will be printed to the Terminal every 60 seconds:


As i mentioned earlier the time this takes will vary massively depending on your internet connection, with a 12mbps upload it took me around an hour to upload just over 4gb. This could easily take you over 8 hours if you have a 1mbps upload.

When the upload has finished you should see something which looks like this:


Now the syspreped image of our Windows Server 2012 R2 install has been deployed to the Kimsufi server, go back to the web manager for your server and change the netboot back to the hard drive, then re start the server again:


Now you need to cross your fingers. After 5 minutes your Kimsufi server should have re started and booted Windows from the sysperped image we deployed. You should now be able to connect to the server via remote desktop. If so congratulations the hard part is now over!


As can be seen below the syspreped image has been successfully deployed to the Kimsufi server, windows has booted on the Kimsufi server and setup all the hardware, finally obtaining an ip address, allowing us to Remote Desktop in to the server:


All you really need to do now is a bit if tidying up / tinkering

Tidy up your new Windows install on the Kimsufi Server:

When you first connect to the server you will be presented with the following:


Say no to this question as your server is connected to a public network.

Now delete the unattend.xml from c:\windows\panther and c:\windows\system32\sysprep


Next you will notice the hard drive space is limited to the amount that was available in your Virtual Machine, so we need to extend the partition of the C:\ drive.

Search for Computer Management on the start screen and click Disk Management, then right click on the C:\ drive and click Extend Volume:


You then simply want to select the maximum amount of space available:


After that you will be able to use all the space on the servers hard drive, of course you can partition the drive as you please:



Static IPv4 Setup:

Your server will have automatically obtained it’s assigned IP address via DHCP, however I would personally configure this to be a static IP, as OVH do this by default on all servers.

Simply go to Network > Network Sharing Center > Change adapter settings > Ethernet > Details then make a note of the IPv4 Address, IPv4 Subnetmask, IPv4 Default Gateway and IPv4 DNS server, then click close:


Click on Internet Protocol Version 4 (TCP/IPv4) and click properties:



Enter the details you made of note of, here i have used the Google DNS servers instead:


IPV6 Setup:

First log in to the Kimsufi / OVH manage and find the IPv6 subnet you have been assigned, then follow my example below to assign your server an IPv6 address and workout what your default gateway should be.


IPv6 Subnet in OVH Manager: 2001:A1D1:9:A8B8::/64
IPv6 Address: Remove the /64 from your IPv6 subnet and add a 1 to the end, your severs IPv6 address would now be 2001:A1D1:9:A8B8::1
Gateway: Remove up to the last two numbers of the IP address (B8::/1) and replace with FF:FF:FF:FF:FF, so in this example the gateway would be 2001:A1D1:9:A8FF:FF:FF:FF:FF
Subnet Prefix Length: This is simply 64

For the preferred DNS and alternate DNS server for IPv6 I use Google DNS service:

  • Preferred: 2001:4860:4860::8888
  • Alternate: 2001:4860:4860::8844

So all entered in to the servers IPv6 configuration would look like this:


You should end up with internet for IPv4 and IPv6 connectivity now:



Update the server:

Next go to Control Panel > Windows Update and turn on Automatic Updates, then let the server install all the updates available:


You are now basically finished and free to configure the server as you please!

However I would suggest:

  1. Creating another Administrator account and disabling the default “Administrator” user account so if anyone does try to bruit force Remote Desktop access to your server they will get no where by using default account names.
  2. Limit Remote Desktop access to certain IP addresses – You can only really do this if you have a static IP address, or another server with a static IP address. This means you can only even attempt to Remote Desktop to the server from a “trusted location”.
  3. If you are unable to limit what IP addresses can access Remote Desktop then i would change the default port form 3389 to something random. At least any automated bot simply trying to connect on port 3389 would get no where, however it wouldn’t stop someone from port scanning your server and finding out what port Remote Desktop is actually listening on. If you do change the Remote Desktop port, remember to open the port you are changing to first on Windows Firewall, if not you will lock yourself out your server.

Hopefully someone will find this tutorial to be useful, I have installed Windows on a few Kimsufi servers like this perfectly fine. If you have any questions i’ll do my best to try and answer them.