Windows Server: first-login checklist

1. Connect with Remote Desktop to your IP as Administrator using the password from the console.
2. Press Ctrl+Alt+End → Change a password. Use 16+ characters.
3. Change the RDP port (PowerShell: Set-ItemProperty 'HKLM:\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp' -Name PortNumber -Value 3390), allow it in Windows Firewall, restart TermService, reconnect on the new port.
4. Confirm Network Level Authentication is on and set an account lockout policy (secpol.msc → Account Lockout Policy: 5 attempts / 15 minutes).
5. Create a second administrator account for daily use; rename the built-in Administrator.
6. Run Windows Update and reboot; set active hours.
7. Set the time zone (Set-TimeZone 'India Standard Time').
8. Disable services you do not need (Print Spooler, if not printing) and leave file sharing closed unless on a private VLAN.
9. Take a snapshot from the server page before installing applications.

The full walkthrough with client instructions for every platform is in the Windows RDP guide.