Remote Desktop: How to block connections from the internet f. a user

Hi,

I would like to know how to block Remote Desktop connections from the internet for a specific user. The user should be able to do Remote Desktop connections from the local network to the server but not from the internet.

I don't want to block remote desktop connections form the internet for all users just for some of them.

How can you even know if a remote desktop connection is comming from the internet or local network? Is there a command you can run or can you check this by using the event viewer on the server?

Thanks in advance.

While enabling remote connections to you computer also configures the Windows Firewall automatically, you want to make Remote Desktop is allowed to pass through the firewall but only for Private network block Public network access through the firewall. You can check this setting on Control Panel\System and Security\Windows Firewall\Allowed apps.

You don't give details of the network is it using nat or a corporate network?

FreeBooter said:

While enabling remote connections to you computer also configures the Windows Firewall automatically, you want to make Remote Desktop is allowed to pass through the firewall but only for Private network block Public network access through the firewall. You can check this setting on Control Panel\System and Security\Windows Firewall\Allowed apps.

This would probably block remote desktop for all users that access it from the internet but I only want to block it for specific user. But thanks for helping.

Samuria said:

You don't give details of the network is it using nat or a corporate network?

Coorporate network, the server that is accessed is a Windows Server 2016 v1607 (It's a workgroup network not a domain)

Far as i know what you are asking is not possible.

Is it running NAT if so you cant connect to a pc from the interent via RDP unless ports are forwarded

Samuria said:

Is it running NAT if so you cant connect to a pc from the interent via RDP unless ports are forwarded

Meaning? Probably ports are forwarded. But can it still be done? Block specific users from accessing Remote desktop from the internet...

Is it possible to find out where the connection is comming form local network or interent?