SecureAnyCloud
Deployment guide

Neo4j on Windows

Overview

Neo4j is a graph database for storing and querying highly connected data with the Cypher query language. It suits applications such as social networks, recommendation engines, fraud detection and knowledge graphs.

This SecureAnyCloud AMI runs Neo4j on Windows Server and is available from the AWS Marketplace. This guide covers its deployment and configuration.

What you get:

  • Neo4j graph database with the browser console on port 7474
  • The Neo4j Graph Database Windows service, which starts automatically on boot
  • Default credentials (neo4j/neo4j) with a mandatory password change on first login
  • Windows Server with Remote Desktop access
  • 24/7 SecureAnyCloud support with a 24 hour response SLA

Prerequisites

Before you launch this AMI, make sure you have:

  • An active AWS account
  • An active subscription to the Neo4j on Windows listing on AWS Marketplace
  • An EC2 key pair for password decryption
  • A Remote Desktop client application

Recommended instance type: t3.medium (2 vCPU, 4 GB RAM) or larger. The minimum requirements are 1 vCPU, 1 GB RAM and 30 GB of disk space.

1

Launch the AMI

  • Open the AWS Marketplace and search for "Neo4j Windows SecureAnyCloud".
  • Select Continue to Subscribe, accept the terms, then select Continue to Configuration.
  • Choose your preferred Region and Software Version.
  • Select Continue to Launch.
  • Choose Launch through EC2 for full control over instance configuration.
  • Select your instance type (t3.medium recommended).
  • Configure storage with a minimum of 30 GB gp3. Increase it for large graphs.
  • Configure your Security Group with the following inbound rules:

Port Protocol Source Purpose

3389 TCP Your IP Remote Desktop (RDP) access

7474 TCP Your IP Neo4j Browser console (HTTP)

Important: Restrict port 7474 to trusted IP addresses only.

Select your EC2 key pair and launch the instance.

2

Retrieve the Windows Password

Wait for the EC2 instance to pass 2/2 status checks. Then:

  • Open the AWS Console and go to EC2 > Instances.
  • Select your instance.
  • Select Actions > Security > Get Windows password.
  • Select Browse and upload your EC2 key pair .pem file.
  • Select Decrypt password.
  • Note the Username (Administrator) and the decrypted Password.
3

Connect via Remote Desktop

Open your Remote Desktop client.

On Windows

  • Press Win + R, type mstsc and press Enter.
  • Enter the public IP address of your instance.
  • Select Connect.

On macOS

  • Open Microsoft Remote Desktop.
  • Select Add PC and enter the public IP address.
  • Double-click the connection to connect.

When prompted, enter:

  • Username: Administrator
  • Password: the decrypted value from Step 2
4

Access the Neo4j Browser Console

The Neo4j service starts automatically on boot. Open a web browser on the instance (Firefox or Internet Explorer) and go to:

http://localhost:7474

Or, from your local machine, go to:

http://<public-ip-address>:7474

The Connect to Neo4j screen appears.

5

Log In and Change Password

Enter the default credentials:

  • Username: neo4j
  • Password: neo4j

Select Connect.

Neo4j immediately prompts you to change the default password. Enter a new password, confirm it, then select Change password.

You are now connected to the Neo4j Browser and can create and query graph data.

6

Create Your First Graph

In the Neo4j Browser command bar, which is preceded by $, enter Cypher queries.

Create nodes:

CREATE (alice:Person {name: 'Alice', age: 30}) CREATE (bob:Person {name: 'Bob', age: 25}) CREATE (company:Company {name: 'Acme Corp'})

Create relationships:

MATCH (a:Person {name: 'Alice'}), (b:Person {name: 'Bob'}) CREATE (a)-[:KNOWS]->(b)
MATCH (a:Person {name: 'Alice'}), (c:Company {name: 'Acme Corp'}) CREATE (a)-[:WORKS_AT]->(c)

Query the graph:

MATCH (p:Person)-[r]->(target) RETURN p, r, target

The browser displays a visual graph of the nodes and relationships you created.

Managing the Neo4j Service

Neo4j runs as a Windows Service named Neo4j Graph Database and starts automatically on boot.

To manage the service from Windows Services:

  • From the Start Menu, search for Services and open it.
  • Locate Neo4j Graph Database in the list.
  • Right-click it and choose Start, Stop or Restart.

To manage the service from PowerShell:

# Check Neo4j service status Get-Service -Name "Neo4j Graph Database*"
# Stop Neo4j Stop-Service -Name "Neo4j Graph Database*"
# Start Neo4j Start-Service -Name "Neo4j Graph Database*"

Server Components

Component Version

Neo4j Various

Filesystem Layout

Drive Description

C:\ System drive with Windows and Neo4j installation

Key directories:

Directory Purpose

C:\neo4j Neo4j installation root

C:\neo4j\data Graph database files

C:\neo4j\conf Configuration files

C:\neo4j\logs Neo4j log files

Troubleshooting

Cannot access Neo4j Browser on port 7474

  • Verify that the Neo4j service is running in Windows Services.
  • Check that your security group allows port 7474 from your IP.
  • Test locally at http://localhost:7474 from within the RDP session.
  • Check that Windows Firewall is not blocking port 7474.

Authentication fails

  • Use the default credentials neo4j/neo4j on first login.
  • If you changed the password and forgot it, stop Neo4j, delete the auth file in the data directory, then restart Neo4j.

Neo4j service fails to start

  • Check Windows Event Viewer for error details.
  • Verify that Java is installed. Neo4j requires it.
  • Check that enough disk space is available.
  • Review the logs in the Neo4j logs directory.

Cannot connect via RDP

  • Verify that the instance has passed 2/2 status checks.
  • Check that your security group allows port 3389 from your IP.
  • Wait up to 15 minutes for the Windows password to become available.

Security Recommendations

  • Change the default password immediately on first login.
  • Change the Windows Administrator password after your first login.
  • Restrict port access. Allow ports 3389 and 7474 from trusted IPs only.
  • Enable HTTPS for the Neo4j Browser by configuring SSL in the Neo4j configuration.
  • Use role-based access control to create users with minimal privileges.
  • Monitor database activity through the Neo4j Browser system information panel.
  • Back up regularly. Use the Neo4j backup tools to create database snapshots.
  • Enable Windows Update. Keep the OS patched with the latest security updates.

Support

If you have any issues with this product, contact SecureAnyCloud support:

  • Email: sales@secureanycloud.com
  • Website: secureanycloud.com
  • Support hours: 24/7, with a 24 hour response SLA

Deploy on AWS

Launch Neo4j on Windows with 24/7 support from SecureAnyCloud.

View on Marketplace

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com

Deploy on AWS

Launch Neo4j on Windows with 24/7 support from SecureAnyCloud.

View on Marketplace

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com