Using a strong and unique Administrator password is an important part of securing your Windows VDS server. You may particularly want to change the password when your server is first deployed or when an automatically generated password was provided with your VDS service.
In this guide, we explain how to change the Administrator password or the password of another user account on Windows Server.
Because your VDS may be accessible over the internet, remote access services such as RDP can receive automated login attempts.
Changing your server password is particularly recommended when:
Changing the password alone does not provide complete server security, but it is an important basic security measure.
Before changing the password, connect to your Windows VDS server.
On a Windows computer, press:
Windows + R
Enter:
mstsc
and press Enter.
Enter the IP address of your VDS server and start the RDP connection.
Log in using your current username and password.
The administrator account on Windows Server is commonly:
Administrator
However, your server may use another administrative account.
One of the easiest ways to change your password during an RDP session is to use:
Ctrl + Alt + End
The normal Ctrl + Alt + Delete combination may be captured by your local computer.
Using Ctrl + Alt + End sends the relevant security command to the remote Windows session.
Select:
Change a password
Then enter:
Old password: Your current password
New password: Your new password
Confirm password: Enter your new password again
Confirm the operation to change the password.
If you have administrative privileges, you can manage local user passwords through Computer Management.
Right-click the Start menu and open:
Computer Management
Navigate to:
Local Users and Groups → Users
Right-click the account whose password you want to reset and select:
Set Password
Enter and confirm the new password.
This method can reset a local user's password without knowing the current password. Pay attention to the Windows warning displayed during the process, as encrypted files or certain credentials associated with the user may be affected.
User passwords can also be managed from the command line.
Open Command Prompt with administrator privileges.
To display local user accounts, run:
net user
To securely set a new password for an account, use:
net user USERNAME *
For example:
net user Administrator *
Windows will ask you to enter and confirm the new password.
The password characters will not be displayed while typing. This is normal.
This approach avoids placing the password directly in the command itself.
Server passwords should be selected more carefully than ordinary passwords.
A strong server password should:
Predictable passwords such as a company name followed by the current year should be avoided.
A long, randomly generated password or strong passphrase is generally preferable.
Changing the password of your current account will not normally terminate the active RDP session immediately.
However, after disconnecting, you will need to use the new password the next time you connect.
If your computer has stored your previous RDP credentials, you may need to update them.
Your Windows computer may have saved the previous RDP credentials.
You can remove the stored credentials from Remote Desktop Connection or enter the new password when prompted.
If the credentials are stored in Windows Credential Manager, they may also need to be updated.
Some Windows services, scheduled tasks, backup applications, or other software may be configured to run using a specific user account.
After changing that account's password, these services may continue trying to authenticate with the old password.
After a password change on a production server, check:
and update their credentials where necessary.
Renaming the Administrator account may reduce some basic automated login attempts, but it should not be treated as a complete security measure.
More important security controls include:
The default RDP port is:
TCP 3389
Using a different port may reduce unwanted traffic from automated scans. However, changing the port does not replace strong passwords, firewall rules, or access restrictions.
Where practical, restricting RDP access to trusted IP addresses can provide an additional layer of protection.
If you forget your Administrator password and no active RDP session is available, you may no longer be able to log in normally.
Password recovery methods depend on the VDS infrastructure.
Your VDS management panel may provide options such as:
If no self-service recovery option is available, technical support may be required.
Instead of changing passwords solely according to a fixed schedule, focus on using strong and unique credentials.
However, you should change the password immediately if you believe it may have been compromised, if someone with previous access no longer requires it, or if the password has accidentally been exposed.
In addition to strong passwords:
Server security should use multiple layers rather than relying on a single setting.
Yes. If you have the necessary permissions, you can change the Administrator password or passwords for other Windows user accounts.
While connected through RDP, press Ctrl + Alt + End and select Change a password.
Ctrl + Alt + Delete may be captured by your local computer. Ctrl + Alt + End is commonly used to send the relevant security command to the remote Windows session.
No. Changing a user password does not shut down your VDS.
Your VDS management panel may provide password reset or console access options. Available recovery methods depend on the hosting infrastructure.
Using a strong and unique Administrator password is one of the fundamental security measures for a Windows VDS server.
After connecting through RDP, you can easily change your current password using Ctrl + Alt + End. Administrators can also manage user passwords through Computer Management or the command line.
After changing a password, remember to check services, scheduled tasks, and applications that may use the affected account credentials.
When using your İde Bilişim VDS service, keep your server access credentials secure and never share them with unauthorized users.