Security Settings>Account Policy>Password Policy/Account Lockout Policy

Change the password policy to a maximum of 31 days, a minimum of 12 characters, and 10 login attempts before lockout (lockout is 30 minutes). Set “Password must meet complexity requirements” to enabled.

Security Settings>Local Policies>Audit Policy/user Rights Assignment

Under the Audit Policy you need to set the “audit account logon events” to failure so you can see whenever someone fails to log in or to see a brute force attempt.

Under the “User Rights Assignment,” you need to set the “access this computer from the network” to Users, Backup Operators, and Administrators ONLY. If it says everyone is allowed access, remove the “Everyone” permissions.

Should look like this:

After all of your policies are set I suggest going into the computer manager and going to your username and setting your password to never expire (some cases it will not let you make a new password so just in case) While in this area, use the readme file to see if user passwords dont meet the criteria and set them to “user must change password at next logon”

While we are on the topic of users, find the readme and look through all users and passwords, make sure to remove or demote users with improper clearance using the control pannel.

another part is if you go to the services application and go to local services, make sure to disable the “Simple TCP/IP Services” so that you are better protected.

Now, you press Windows + R and type “sysdm.cpl”; this gives you access to the System Properties panel. Once you are there, you will go to the Remote tab. You should make sure it looks like the photo below: