What to Know Before Choosing a Windows Dedicated Server

Operating a Windows dedicated server implies accessing Remote Desktop, rather than using SSH connection, and licensing Windows Server, rather than having it for free. In this article, we'll cover the licensing policy for Windows servers, the default port of Remote Desktop, and the actual scope of out-of-band management in case RDP won't work.

What's different about managing a Windows dedicated server versus a Linux one?

The difference is in connection to Remote Desktop, instead of SSH, and licensing Windows Server, rather than having it for free. The rest of the everyday server maintenance implies the same operations: managing users, applying updates, and controlling services.

The licensing difference is the one that is paid extra, and it is described below — everything else related to server maintenance is only different in tools used, rather than operations performed.

How is Windows Server licensed on a dedicated server?

Under the terms of the Service Provider License Agreement, or SPLA, issued by Microsoft. It provides the hosting providers with the opportunity to license Windows Server and other Microsoft software on lower monthly rates.

According to the Wikipedia entry on dedicated hosting, SPLA allows the providers to "purchase and resell software based on reduced monthly fees", and the covered products include "Windows Operating System, Microsoft SQL Server, Microsoft Exchange Server, Microsoft SharePoint". This very monthly subscription scheme makes a Windows dedicated server costlier than the equivalent Linux one.

What port does Remote Desktop use, and does that matter for security?

Remote Desktop works on TCP port 3389 by default. Just like the default SSH port 22, it is a well-known target for scanning and should be restricted from broad access regardless of any port changes you may make.

Port 3389/TCP (default)

According to the official Microsoft documentation, Remote Desktop connects "over the Remote Desktop Protocol (RDP), listening on port 3389 by default" — the very default is what makes leaving this port open and accessible for everyone one of the most widespread reasons for Windows server being attacked.

What does a control panel actually do on a Windows dedicated server?

It combines various server applications and automation tools into a web-based interface for performing everyday routine tasks without creating new Remote Desktop sessions.

Per the same Wikipedia entry, a control panel is "an all-inclusive set of software applications, server applications, and automation tools" that gives you "the ability to automate tasks via a web based front end" — and this is exactly what becomes useful when performing routine tasks.

Can I get out-of-band access to a Windows server if RDP itself won't connect?

Yes, but only with the help of out-of-band management: it is a completely different access method, which is not based on Windows networking, and this is important in case the RDP connection was broken because of some network configuration issues.

Out-of-band management, according to the same Wikipedia entry, is a standard tool for dedicated server maintenance — the broken RDP connection because of bad firewall settings is one of the most typical mistakes that can be solved using the out-of-band access.

Our Bare Metal servers and VPS plans provide you with full administrator access from the very beginning, so evaluating any of the criteria described above is highly recommended.