Prevent TCP 3389 connections from workstations to anywhere / GPO

Question

I am trying to find a good solution to prevent TCP 3389 connections (RDP) from workstation to anywhere by using GPOs.

Workstation --> Any (TCP 3389) / Deny

Any tips?

Answer 1

You can follow along here.
https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/create-an-outbound-port-rule

--please don't forget to upvote and Accept as answer if the reply is helpful--