Windows 7 ignores the firewall rule from Group Policy, that should restrict RemoteDesktop to certain IP addresses. It works for XP, but Win7 machines still allow Remote Desktop from everywhere.
I guess the reason is that Win7 has not one, but three firewall rules for RemoteDesktop:
- Remote Desktop (TCP incoming)
- Remote Desktop - RemoteFX (UDP-In)
- Remote Desktop - RemoteFX (TCP-In)
When the GPO is applied, it adds another rule, titled just "Remote Desktop", but the other three rules remain active and still allow it.
The Server runs Windows 2008-R2, so it should know Windows 7.
How can I make this work?