# 修改远程桌面端口
$NewPort = 33899

Write-Host "Setting RDP port to $NewPort..."

Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" -Name "PortNumber" -Value $NewPort

Write-Host "Configuring firewall rule..."

# 删除旧规则（如果存在）
Get-NetFirewallRule -DisplayName "远程桌面 $NewPort" -ErrorAction SilentlyContinue | Remove-NetFirewallRule

# 创建新规则
New-NetFirewallRule -DisplayName "远程桌面 $NewPort" -Direction Inbound -Protocol TCP -LocalPort $NewPort -Action Allow

Write-Host "Restarting Remote Desktop Service..."

Restart-Service TermService -Force

Write-Host "RDP port changed to $NewPort"
Write-Host "Connect using: <server-ip>:$NewPort"