Al's pointed to the right information, but can I underline:
this is a big risk.
If your machine is EVER visible to the Internet on port 3389, you've just
removed a substantial barrier to access by "the world."
If your issue is not wishing to type a password at startup, consider an
autologon--also a security risk, but more manageable--you can control
physical access to the machine.