Windows 2008 R2 Server with 2 ip address, how to only enable RDP to one address

Question

As the title says we have a Windows 2008 R2 Server with 2 IP address. Currently, we can connect via RDP to both IP addresses, however, we want to block/disable RDP connections that attempt to connect to one of the addresses.

I've spent quite a while on Google and tried a few things in the Firewall and RDP Admin but can't work it out.

Any help appreciated.

score 3 · Accepted Answer · answered Feb 28 '13 at 02:39

If you have the IP addresses on different NIC's, you can bind the RDP listener to a specific NIC. If you have the IP addresses bound to the same NIC, you can set the firewall rules that should be able to accomplish what you want to get done.

Open the Windows Firewall MMC (wf.msc)
Select the Inbound Rules section
Get the properties of the Remote Desktop (TCP-In) rule
On the Scope tab, choose the option to select specific IP's in the "Local IP Address" secion.
Add the IP address that you want to allow RDP connections to connect to.

Obviously need to ensure the firewall is turned on and enabled and the rule applies to all profiles (or at least the profile that this would apply to).

score 1 · Answer 2 · answered Feb 28 '13 at 02:32

1

See screenshot below. Basically, select the Adapter you want to use in Remote Desktop Session Host Configuration tool.

enter image description here

answered Feb 28 '13 at 02:32

ETL

6,513
1
28
48

This wouldn't help if they have two IP addresses bound to the same adapter.. – Rex Feb 28 '13 at 02:38
Thanks for your quick answer but both IP addresses are bound to the same network adapter. – Dean Feb 28 '13 at 02:39
Firewall rules then is your solution - see @Rex answer. – ETL Feb 28 '13 at 02:43

score 0 · Answer 3 · answered Oct 23 '18 at 03:44

An alternative method for solving the problem, or in the case that your interfaces are separated into locations... ie (public and private)

You can follow the instructions of Rex:

Open the Windows Firewall MMC (wf.msc)
Select the Inbound Rules section
Get the properties of the Remote Desktop (TCP-In) rule however, here, instead
Click on the Advanced Tab
Select the Networks you would like this rule to apply to, ie Private

This will make sure the rule is only applied to say your internal interface, rather than the external.

I am unsure as to whether this will null the rule out for the external interface, which may require the creation of a rule to explicity disallow connections to RDP

Windows 2008 R2 Server with 2 ip address, how to only enable RDP to one address

3 Answers3

Linked