You'll need to start Remote Desktop Services (TermService) service, then add the firewall rule to allow inbound connections on port 3389, and finally add the users to the Remote Desktop Users
--please don't forget to upvote
and Accept as answer
if the reply is helpful--