> ## Documentation Index
> Fetch the complete documentation index at: https://help.freakhosting.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Windows Server VPS First Steps: What to Do After Setup

> Windows Server VPS first steps: sign in over RDP, change the Administrator password, install updates, set time zone, check Defender and firewall, add backups.

After setting up a Windows Server VPS, sign in with Remote Desktop and, in this order: change the Administrator password, install all Windows updates, set the time zone and computer name, create a second admin account, confirm Microsoft Defender Antivirus and Windows Defender Firewall are on, protect Remote Desktop, and set up backups. Most steps take one PowerShell command or one **SConfig** menu option on Windows Server 2019, 2022 and 2025.

| Difficulty | Time | Works on | Needs |
| - | - | - | - |
| Beginner | 45 to 90 minutes (mostly updates) | Windows Server 2019 / 2022 / 2025 Standard | Administrator password, an RDP client |

## Before you start

* [Connect with Remote Desktop](https://help.freakhosting.com/portals/other/how-to-connect-to-windows-server-with-remote-desktop.md) as `Administrator`.
* Open **PowerShell as Administrator**: right-click **Start** and choose **Terminal (Admin)** or **Windows PowerShell (Admin)**.
* If RDP stops working at any point, use the [VNC console](https://help.freakhosting.com/portals/vps-panel/how-to-enable-and-use-vnc-console-access.md) to sign in.

> [!TIP]
>
> **SConfig** is a text menu built into Windows Server that covers computer name, local administrators, updates, Remote Desktop, network, date and time and activation. Type `SConfig` in an admin PowerShell window to open it ([Microsoft Learn](https://learn.microsoft.com/en-us/windows-server/administration/server-core/server-core-sconfig)).

## 1. Change the Administrator password

Use a long, unique password (16+ characters, stored in a password manager). Remote Desktop on the internet is a constant target for password guessing.

Press **Ctrl+Alt+End** in the Remote Desktop window, choose **Change a password**, enter the old and new password and press **Enter**.

## 2. Install all Windows updates

> [tab] Settings
>
> Open **Start > Settings > Windows Update** on Windows Server 2025, or **Start > Settings > Update & Security > Windows Update** on Windows Server 2019 and 2022, and click **Check for updates**. Restart when asked and check again until no updates are left.

> [tab] SConfig
>
> Run `SConfig`, choose **6** (**Install updates**), then **1** for all quality updates. Option **5** (**Update setting**) sets **Automatic**, **Download only** (the default) or **Manual**.

The first round on a new server can take a while and need more than one restart. See [install Windows updates](https://help.freakhosting.com/portals/other/how-to-install-windows-updates-on-windows-server.md).

## 3. Set the time zone

```powershell theme={null}
Get-TimeZone -ListAvailable | Where-Object Id -like "*GMT*"
Set-TimeZone -Id "GMT Standard Time"
Get-TimeZone
```

Replace the Id with yours from the list (for example `UTC`). SConfig option **9** (**Date and time**) opens the same setting. See [change the time zone and language](https://help.freakhosting.com/portals/other/how-to-change-the-time-zone-and-language-on-windows-server.md).

## 4. Give the server a name

A random name like `WIN-3F7K2...` is hard to recognise in RDP and logs:

```powershell theme={null}
Rename-Computer -NewName "WEB01" -Restart
```

Names can be up to 15 characters, letters, numbers and hyphens. See [rename a Windows server](https://help.freakhosting.com/portals/other/how-to-rename-a-windows-server.md).

## 5. Create a second administrator account

If the built-in Administrator account gets locked out or its password is lost, a second admin lets you back in:

```powershell theme={null}
$Password = Read-Host -AsSecureString
New-LocalUser -Name "alex" -Password $Password -FullName "Alex"
Add-LocalGroupMember -Group "Administrators" -Member "alex"
```

Members of **Administrators** can sign in with Remote Desktop. For a non-admin user, add them to **Remote Desktop Users** instead; see [add a Remote Desktop user](https://help.freakhosting.com/portals/other/how-to-add-a-user-to-remote-desktop-on-windows-server.md).

## 6. Check Microsoft Defender Antivirus

Defender is installed and enabled by default on Windows Server 2016 and later ([Microsoft Learn](https://learn.microsoft.com/en-us/defender-endpoint/microsoft-defender-antivirus-on-windows-server)). Confirm it is running and up to date:

```powershell theme={null}
Get-Service -Name windefend
Get-MpComputerStatus | Select-Object AntivirusEnabled, RealTimeProtectionEnabled, AntivirusSignatureLastUpdated
Update-MpSignature
```

`Status` should be `Running` and both `Enabled` values `True`. See [use Microsoft Defender on Windows Server](https://help.freakhosting.com/portals/other/how-to-use-microsoft-defender-on-windows-server.md).

## 7. Check Windows Defender Firewall

```powershell theme={null}
Get-NetFirewallProfile | Format-Table Name, Enabled
```

All three profiles (`Domain`, `Private`, `Public`) should show `True`. Only open the ports your software needs; see [open a port in Windows Firewall](https://help.freakhosting.com/portals/other/how-to-open-a-port-in-windows-firewall.md).

> [!WARNING]
>
> Don't turn the firewall off to "test" something on an internet-facing server. Add a specific inbound rule instead and remove it when you are done.

## 8. Protect Remote Desktop

* Keep **Network Level Authentication** on (SConfig option **7**, choice **1**).
* Use the strong password from step 1 on every account that can sign in.
* Consider limiting RDP to your own IP address and setting an account lockout policy. Both are covered in [protect RDP from brute-force attacks](https://help.freakhosting.com/portals/other/how-to-protect-rdp-from-brute-force-attacks.md).

## 9. Set up backups

* On a VPS, [schedule panel backups](https://help.freakhosting.com/portals/vps-panel/how-to-schedule-and-restore-backups.md).
* Inside Windows, use Windows Server Backup for files and system state. See [back up a Windows server](https://help.freakhosting.com/portals/other/how-to-back-up-a-windows-server.md).

## 10. Check activation

Run `slmgr /xpr` to see whether Windows is activated. Details and what the messages mean are in [check Windows Server activation](https://help.freakhosting.com/portals/other/how-to-check-windows-server-activation-and-licensing.md).

## How to check it worked

* **Windows Update** in Settings says **You're up to date**.
* `Get-TimeZone` shows your zone and `hostname` shows the new name.
* You can sign in over RDP as your second admin user.
* `Get-MpComputerStatus` and `Get-NetFirewallProfile` show protection enabled.

## Frequently asked questions

### Should I rename the Administrator account?

Renaming it makes guessing harder because bots try `Administrator` first. Do it only after your second admin account works, and update any saved RDP connections.

### How long do the first updates take?

It depends on how recent the installation image is. Plan for at least one restart and check for updates again afterwards until none are left.

### Do I need extra antivirus software?

Microsoft Defender Antivirus is built in and enabled by default on Windows Server. Keep it updated. If you want to use another antivirus product, read Microsoft's guidance on running Defender alongside it first.

### Can I install software with a package manager?

Yes. See [install software with winget](https://help.freakhosting.com/portals/other/how-to-install-software-with-winget-on-windows-server.md).

## Related guides

> [card] [VPS and dedicated server guides](https://help.freakhosting.com/portals/other/vps-and-dedicated-server-guides.md)
>
> Every guide in this section.

> [card] [Windows Server security checklist](https://help.freakhosting.com/portals/other/windows-server-security-checklist.md)
>
> The full hardening list.

> [card] [Connect with Remote Desktop](https://help.freakhosting.com/portals/other/how-to-connect-to-windows-server-with-remote-desktop.md)
>
> Sign in from Windows.

> [card] [Protect RDP from brute force](https://help.freakhosting.com/portals/other/how-to-protect-rdp-from-brute-force-attacks.md)
>
> Lock down Remote Desktop.

> [card] [PowerShell on Windows Server](https://help.freakhosting.com/portals/other/how-to-use-powershell-on-windows-server.md)
>
> The commands used here.

***

> [!NOTE]
>
> **Checked against Microsoft Learn: [SConfig](https://learn.microsoft.com/en-us/windows-server/administration/server-core/server-core-sconfig), [Set-TimeZone](https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.management/set-timezone), [New-LocalUser](https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.localaccounts/new-localuser) and [Defender Antivirus on Windows Server](https://learn.microsoft.com/en-us/defender-endpoint/microsoft-defender-antivirus-on-windows-server)** on 4 November 2026. Steps were not tested on a live Windows server for this page; menu names can differ slightly between Windows Server 2019, 2022 and 2025.

> [!NOTE]
>
> ### Need Extra Help?
>
> If you encounter any issues, our support team is ready to assist:
>
> * **Live Chat:** Quick assistance via our website.
> * **Support Ticket:** [Open a Ticket](https://freakhosting.com/clientarea/submitticket.php)
> * **Discord:** [Join our Community](https://discord.gg/freakhosting)
> * **Email:** [support@freakhosting.com](mailto:support@freakhosting.com)

> [!TIP]
>
> ### Save on Your Hosting
>
> Ready to upgrade your hosting? Use code **KB20** at checkout for **20% off** your first order!

***

**Last Updated:** November 2026


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.