Nice job, koby.
Sandeep will tell you never use a word for a password. A four character non word is better than a 20 character word, because it will be in the dictionary. Having said that, a four character password isn't very good either, lol. Want to use minimum of eight character, lower case and upper case with a number. Putting the number inside the password will increase its strength dramatically.
Definitely change the port 3389 to a different port. You can check your event viewer logs to see how many times a scanner tried to get into port 3389. As Sandeep and I were talking about earlier, the new OSs have a gateway so you don't need to open a port that is open all the time. Makes RDP much easier as well.