Securitylogcanbeanalyzedandcommonattackersnetworkscanbeblockedbyfirewall.RDPportcanbechangedforthecontainer,followthisMSarticle:HowtochangethelisteningportforRemoteDesktop."NetworkLevelAuthentication"canbeenabledforsuchnode/containers.IfyourhostisrunningWindowsServer200