Please understand that I have been through all the posts regarding this issue and my issue has not been resolved which is as follows: I have a brand new installation of Server 2008 R2 SP1, with all updates installed and with no modifications to any of the firewall rules nor any added rules of my own. I want to restrict RDP access to certain IP addresses only using the scope tab of the Remote Desktop (TCP-In) rule but it simply is not functioning as it should. This rule is set to cover all network profiles and all network interfaces of the server.However, I can still Remote Desktop in from ANY IP address. Where else can I investigate?
I have found the issue, there was an inbound rule called tcp all that was allowing all tcp ports from 0-65535 that was enabled and as a result was not blocking the IP address as it was supposed to. I disabled the rule and all is working correctly now. thank you to all that assisted, much appreciated. Note that I have NO idea where this rule came from but it was not on another server that I checked, which is how I found it to begin with. Thanks again.
- Open the "Windows Firewall with Advanced Security"
- Choose the "Inbound Rules"
- Goto the "RDP Rule" / Edit
- Chosse the "Scope" section
- Edit the "Remote IP Adresses"
Screenshot from Server 2012 but Server 2008 R2 is very similar
For every rule you may have three profiles (Domain Networks, Private Networks, and Public Networks). Take care to use the wanted profile.
Firstly, you should do these changes not only to the
TCP IN rule.
RDP (at least on a Server 2012 R2) has three different Inbound rules:
- TCP IN (Port 3389)
- UDP IN (Port 3389)
- TCP IN (Random Port to shadow a Session.)
Hope that helps, the rest is answered by boboes.
Maybe your Firewall is disabled, you can't see that in the "Windows Firewall with Advanced Security", but under:
Control Panel -> System and Security -> Windows Firewall