1

Is it possible to block, with Windows settings only (no firewall), Remote Desktop connections coming outside our network and allow connections only for PCs in private LAN?

4
  • I don't think there's any built-in way to do that specifically, as the Windows firewall was designed for that purpose. Why can't you use the firewall?
    – trpt4him
    Sep 13, 2013 at 14:58
  • RDP's security is user-centric, not connection-centric, so any pc that can contact the workstation can establish an RDP connection. it may not allow the user to login, but it will connect. as such, if you want to prevent externals from accessing your system at all, you need to use networking tools like firewalls. Note that if you have a Firewall/NAT router, RDP is most likely already blocked for outsiders, unless you have allowed connections to tcp\3389 through your firewall and nat. Sep 13, 2013 at 15:07
  • RDP port is configurable, so blocking 3389 will only block the default port
    – Keltari
    Sep 13, 2013 at 16:40
  • You could set, using group policy, the list of allowed uses to only domain computers. That would, assuming you have no laptops outside the local network, effectively prevent outside devices from authenticating. Exceptions could, of course, be made for designated users or PC's.
    – Usta
    Sep 13, 2013 at 21:15

2 Answers 2

1

If you're enforcing network level authentication (only) for RDP, you can leave the port open and the user will not be able to establish a session without authenticating first.

http://en.wikipedia.org/wiki/Network_Level_Authentication

1
  • It might be a correct answer, but you're not really explaining how the OP should use Network Level Authentication. I would recommend you to elaborate. Sep 13, 2013 at 21:10
0

Any router sold to the general public for home use should already be configured to NOT forward any requests on port 3389 (and 3388, and most other ports) from the internet to computers on your local network.

So it should just ignore (and maybe log) anyone attempting to RDP into one of your devices from the outside world.

Look at your router's port forwarding settings to confirm (If you need help, search for tutorials on how to enable RDP from outside, which is what most people search for).

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .