rdp and remote assistance enabled firewall - remote management

[wuzzle]

Hello, I have created a firewall policy that allows inbound remote desktop exceptions for computers in the domain. I have also enabled inbound admin exceptions for remote assistance. There is a firewall port exception TCP 135 for remote assistance. Do I also need to create a port exception for remote desktop?

Thanks

[kbeckman]

Yes, you'll need to open TCP 3389 for Remote Desktop. In Windows XP, there is a policy "Windows Firewall: Allow inbound Remote Desktop exceptions." in Network/Network Connections/Windows Firewall/Domain Profile. If you're using Vista+, Windows Settings, Security Settings, Windows Firewall with Advanced Security. There's a pre-defined group called "Remote Desktop."