How to have a strong secure policy for Remote access in Windows Server 2008R2

Dear All,

Our IIS server was built in Windows Server 2008 R2 Standard platform and it was captured by hackers recently. Then I have to recover the server from a backup in old time.

My question is how to have a best secure policy during I or my colleague do remote access for the server?

Is it enough if we change default remote port from 3389 to 10055?

Also is the below method correct for change the 3389 port?   

Thanks,

-------------------------------------------------------------------

1. Start Registry Editor.
2. Locate and then click the following registry subkey:
   HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp\PortNumber
3. On the Edit menu, click Modify, and then click Decimal.
4. Type the new port number, and then click OK.
5. Quit Registry Editor.
6. Restart the computer.

Franklin hong