I have the following firewall setup in my Advanced Windows Firewall screen:
If I understand it correctly, only the two ips I have listed should be able to connect to my remote desktop service.
Here is the rds setting that windows makes:
As you can see, I don't have remote desktop enabled. I can rdp in without an issue but I'm still getting alot of these in my event log:
Failure Information: Failure Reason: Unknown user name or bad password. Status: 0xc000006d Sub Status: 0xc0000064 Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: WIN7PC01-PC Source Network Address: 18.104.22.168 Source Port: 60648
Am I misunderstanding how this works? Shouldn't the firewall settings prevent them from even reaching my rdp services to log in if they aren't one of these two ip addresses?
Also, I don't have a hardware firewall to make any settings to. This is strictly a question about Windows Firewall. Don't have one a hardware firewall and cannot set one up in this scenario.
==== EDIT ====
The rule is enabled otherwise I wouldn't be able to log in but here is the rule and the rest of the settings. Sorry I didn't say this earlier.