Post date: Mar 28, 2018 7:20:48 PM
Open the Group Policy Object (GPO)
Navigate to Computer Configuration, Policies, Administrative Templates, Network, Network Connections, Windows Firewall, Domain Profile.
Double-click Windows Firewall: Allow inbound Remote Desktop exceptions.
Set this to Enabled and add the addresses that can connect. This could be * for all IP addresses, specific subnets, or localsubnet for only the local subnet.
(Something like 192.168.0.0/24 will also work)
Navigate to Computer Configuration, Policies, Administrative Templates, Windows Components, Remote Desktop Services, Remote Desktop Session Host, Connections.
Double-click Allow users to connect remotely using Remote Desktop Services, set it to Enabled, then click OK.
Close the Group Policy object and make sure it's linked to the required locations.