Hardening steps that actually make a difference:
- Change the default RDP port and use a strong, unique password. Exposed RDP on port 3389 is scanned constantly.
- Enable two-factor or restrict RDP to your home IP if the provider allows it.
- Set Windows active hours to cover your sessions, so updates can't restart the machine at 08:05.
- Disable unnecessary services and startup apps. A trading VPS should run the platform and little else.
- Keep platform and OS updates current, but apply them on weekends.
- Back up your platform profile, templates and EA settings to somewhere off the VPS.
What's the most useful VPS setting you've changed?