Intermediate8 min read
Configure a remote desktop session on a Windows Server image
Image availability, licensing, and restricting access to the addresses you use.
Last updated 1 August 2026
An image and a license are both required
A Windows desktop needs a Windows Server image, which is only offered on some plans and in some regions, and a license appropriate to your use. Both are shown separately in the configuration flow.Restrict the port
Leaving the remote-desktop port open to the internet attracts continuous credential-stuffing traffic. Limit it to the addresses you connect from.
powershell
New-NetFirewallRule -DisplayName "RDP from office" -Direction Inbound -Protocol TCP -LocalPort 3389 -RemoteAddress 198.51.100.0/24 -Action AllowBefore you rely on it
- Create a named administrator account and disable the default one.
- Choose the region closest to you: interactive sessions are latency-sensitive.
- Remember that a desktop left running is charged whether or not anyone is connected.
Was this page useful?
Feedback about article windows-remote-desktop