If you are using Windows remote desktop, one of the most important things you can do to help ensure security is to change the default port on which remote desktop operates. The default port number is 3389, and since most people don't bother to change it, this is the port that hackers will be looking for. If you change this port, the "remote assistance" feature will no longer work, but changing the port is fairly easy, so you can always change it back if you need to use that feature.

To change the port use by the remote desktop, open the registry editor but running regeidt. When the registry editor opens, navigate on the left panel to the HKEY_LOCAL_MACHINE + System + CurrentControlSet + Control + TerminalServer + WinStations + RDP-Tcp section.

If there is a PortNumber parameter shown on the right, just double click and edit the value. If there is no such parameter, add a new parameter (right click in the right panel and you'll get a menu that allows you to add a new parameter) of type DWORD. Once the parameter is added, you can adjust the port to whatever you like.

Once the changes are made in the registry editor, save them and restart your machine. Your remote desktop will now be operating on the port number you specified.