Help installing windows on server

[j_h_o]

Good to hear.

Are you planning on running VMs on that box with Hyper-V?

Either way, you'll want to make sure you disable any NIC offloads, VMQs because they're probably broken on that NIC, and you'll see really slow network transfers.

 

[nerd31]

only one problem, I still have some other devices with problems, no clue what to do with them:


Also I still have this issue:



Still no internet hmmm, any idea what more I should do?

 

[j_h_o]

By default, the NIC will be trying to get an IP via DHCP.

Did your provider tell you what IP address(es) are assigned to you? You'll have to static them on the NIC. Configure this on one of the Supermicro MicroLP 10 GBase-T NIC that you see.

 

[nerd31]

Good to hear.

Are you planning on running VMs on that box with Hyper-V?

Either way, you'll want to make sure you disable any NIC offloads, VMQs because they're probably broken on that NIC, and you'll see really slow network transfers.

I am just planning to use this server with some programs on it, I hope I won't have any issues with slow network because for my application a fast connection is really important. I actually rented this server to get a better connection than my previous server which was already really fast

By default, the NIC will be trying to get an IP via DHCP.

Did your provider tell you what IP address(es) are assigned to you? You'll have to static them on the NIC.

Yes they told me, they gave me a gateway ip, a usable ip, a broadcast ip and a subnet mask, how do I "static them on the NIC"?

 

[nerd31]

By default, the NIC will be trying to get an IP via DHCP.

Did your provider tell you what IP address(es) are assigned to you? You'll have to static them on the NIC. Configure this on one of the Supermicro MicroLP 10 GBase-T NIC that you see.

Sorry if you were already writing another response, I think I got it:

This looks really good!
Thank you so much, also @MountainBofh

 

[j_h_o]

... this is beginning to sound dangerous.

Ensure you do not enable Remote Desktop on this NIC if it's directly connected to the internet.

Right click on that globe in the tray > Open Network & Internet Settings > Change Adapter Options > right click on the Supermicro NIC that is enabled > Properties > IPv4 > Properties > Use the following IP address. Enter your usable IP, subnet mask, and the default gateway as you were provided.

 

[nerd31]

... this is beginning to sound dangerous.

Ensure you do not enable Remote Desktop on this NIC if it's directly connected to the internet.

Right click on that globe in the tray > Open Network & Internet Settings > Change Adapter Options > right click on the Supermicro NIC that is enabled > Properties > IPv4 > Properties > Use the following IP address. Enter your usable IP, subnet mask, and the default gateway as you were provided.

Wait sorry, why is it beginning to sound dangerous? I do need to enable remote desktop at some point, is there a way to do this safely? Also, if I were to enable remote desktop right now, what could happen that's bad? I did enter the usable IP, subnet mask and default gateway already indeed

 

[nerd31]

Are you talking about people potentially trying to brute force into my server through Remote Desktop? I have used DUO 2FA before to mitigate this risk, I don't know if that's enough, what would you recommend?

... this is beginning to sound dangerous.

Ensure you do not enable Remote Desktop on this NIC if it's directly connected to the internet.

Right click on that globe in the tray > Open Network & Internet Settings > Change Adapter Options > right click on the Supermicro NIC that is enabled > Properties > IPv4 > Properties > Use the following IP address. Enter your usable IP, subnet mask, and the default gateway as you were provided.

 

[MountainBofh]

MS Remote Desktop has a LOT of security issues, and the script kiddies will go WILD trying to break into the machine. If you're going to use it, I'd lock it down by only allowing connections from a trusted IP address.

All my Windows servers only accept connections from the local work subnet, or the VPN server.

 

[nerd31]

MS Remote Desktop has a LOT of security issues, and the script kiddies will go WILD trying to break into the machine. If you're going to use it, I'd lock it down by only allowing connections from a trusted IP address.

All my Windows servers only accept connections from the local work subnet, or the VPN server.

I see hmm, well I connect with my servers from 2 different pc's and also from my phone through the remote desktop app, which is essential to me, the IPs on there always change since I am using my mobile internet of course, so I am not sure how I could make that work.

I have used DUO 2FA in the past to improve security and it worked really well from what I could tell, but I am not sure if 2FA is enough or if these script kiddies you're talking about will have ways to get around that as well... what do you think?

 

[j_h_o]

The service itself is likely insecure, so remote compromise does not require knowing a username/password and 2-factor.

You are using the system in a very dangerous configuration.

 

[nerd31]

The service itself is likely insecure, so remote compromise does not require knowing a username/password and 2-factor.

You are using the system in a very dangerous configuration.

Alright, I will try to setup a vpn server and only allow remote desktop connections from that vpn server, any idea if there’s a good (affordable) vpn provider that allows me to use it on multiple devices including ios?

 

[MountainBofh]

No need to pay for a vpn provider, just set a VPN service on your Windows box. Try wireguard. How to Setup Wireguard VPN Server On Windows - Henry's Portal

 

[nerd31]

No need to pay for a vpn provider, just set a VPN service on your Windows box. Try wireguard. How to Setup Wireguard VPN Server On Windows - Henry's Portal

Thanks, I will take a look at this, however I did read that this might impact performance, do you know more about that by any chance?

 

[MountainBofh]

wireguard is extremely fast, you won't notice a speed drop off.

 

[Tech Junky]

Thanks, I will take a look at this, however I did read that this might impact performance, do you know more about that by any chance?

Performance of the apps? Nah, going full tilt gbps only uses 0.03% of the CPU. WG spawns more instances of itself as speed is needed and kills them as bandwidth drops off.

 

[nerd31]

wireguard is extremely fast, you won't notice a speed drop off.

Perfect, and just as a short term solution while I figure out how to set this up, is restricting RDP access to only my personal IP address a good way to secure it? Or are there ways to get around that too?

 

[MountainBofh]

Restricting it to your personal IP would be good.