Windows Server Firewall Rule

Question

Windows Firewall

We have one Remote Desktop Server (Windows Server 2019 DC Edition) in which the connection to the Remote Desktop Services must be allowed only to users that are connected externally via VPN connection.
Users in the internal network (with some exceptions) should not have access to the server. Also all users can work work either from inside the building or from their home office.

Resuming:
I need to implement a Windows Firewall rule that blocks RDP connection from the internal network to the server, but at the same time we must allow some users to do so from the internal network.

Answer 1

Hi @Mayckel TS ,

Welcome on Microsoft Q&A.

I would suggest to define scopes and and NSG's. You can read more about these configuration options below:
https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/restrict-access-to-only-specified-users-or-devices

Or specific user/group
https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/restrict-server-access-to-members-of-a-group-only
https://www.microsoftpressstore.com/articles/article.aspx?p=2224362&seqNum=2

Please upvote or qccept as answer if it helped.