Configure the Windows Firewall
for Remote Desktop Connections:
When Remote Desktop (Remote Access)
is enabled, Windows automatically creates an exception within its firewall
to allow connections. However, often this exception only allows connections
from the local network or subnet. Remote Internet based users, or users on a
different subnet, connecting through a router or by VPN are still blocked
from access. The exception can be edited for any service, such as Remote
Desktop, to allow additional subnets or all users.
-
Open the Firewall management
display using "Windows Firewall" within Windows Control Panel.
-
Verify the Firewall is enabled.
If not there is no need to configure anything else
-
choose the Exceptions tab,
highlight Remote desktop (which should be checked) and choose edit

-
Highlight TCP 3389 and choose Change Scope

-
Choose "Any computer (Including those on the
Internet)"

-
If connecting from a fixed location, you may wish
to choose "Custom list". This option lets you add a specific remote IP
from which connections will be made, or a remote subnet in the form
192.168.123.0/255.255.255.0 (note: the '0' in the IP address, indicates
entire subnet)
Useful links: