I have added my role to a virtual subnet, and configured network security groups to allow 63389 inbound to 3389 I've tried various permutations 3389 to 3389 But I can never get RDP to work. If I remove the NSG it works ok. I'm basically doing what it says here
Here is what I am currently using for my web_sg subnet 10.1.0.0/16
# RDP inbound Get-AzureNetworkSecurityGroup -Name "web_sg" | Set-AzureNetworkSecurityRule -Name RDP-web_dmz -Type Inbound -Priority 347 -Action Allow -SourceAddressPrefix 'INTERNET' -SourcePortRange '63389' -DestinationAddressPrefix '10.1.0.0/16' -DestinationPortRange '3389' -Protocol TCP # SSL Inbound Get-AzureNetworkSecurityGroup -Name "web_sg" | Set-AzureNetworkSecurityRule -Name SSL-web_dmz -Type Inbound -Priority 348 -Action Allow -SourceAddressPrefix '*' -SourcePortRange '*' -DestinationAddressPrefix '10.1.0.0/16' -DestinationPortRange '443' -Protocol TCP
I have also tried 3389 -> 3389, and * -> 3389 and have also added these as endpoints in my cloud service. Note that I am enabling remote desktop manually using the azure management website.