You'll need to start Remote Desktop Services (TermService) service, then add the firewall rule to allow inbound connections on port 3389, and finally add the users to the Remote Desktop Users
--please don't forget to upvote and Accept as answer if the reply is helpful--