What should be configured in the first place for the secure operation of Windows Server?

Question

Windows Server

At the disposal of Windows Server 2016 Standard - so far a clean installation on a KVM host.
The server will host some windows-only software for development, and it will also act as a Windows machine for everything that, for various reasons, could not be transferred (or found an analogue) to Linux.
The server is connected to a network where all other participants are Linux devices, i.e. there is no need for Active Directory.
What needs to be configured first of all in order to release the server on the network with peace of mind and let users connect via RDP (3-5 maximum)?
Previously, I did not encounter Windows Server in setting up, because. I develop under *nix.

Answer 1

Have you already bought terminal licenses for the server?
By default, the server allows only two simultaneous RDP connections.
If you need more simultaneous connections, you need licenses (RDS CAL).
winitpro.ru/index.php/2017/11/21/ustanovka-i-aktiv...

Answer 2

1. IPBan
2. EvlWatcher
3. Bitwise SSH server
4. Folder Guard

Answer 3

It's strange that no one mentioned srp (Software Restriction Policies). IMHO this is the first thing to do if there are users and third-party programs on the server. And even if they don't.