# Remote Desktop - Shadow (TCP-In)
New-NetFirewallRule -DisplayName "Remote Desktop - Shadow (TCP-In)" `
    -Direction Inbound `
    -Protocol TCP `
    -LocalPort 3389 `
    -Action Allow `
    -Enabled True `
    -Profile Any

# Remote Desktop - User Mode (TCP-In)
New-NetFirewallRule -DisplayName "Remote Desktop - User Mode (TCP-In)" `
    -Direction Inbound `
    -Protocol TCP `
    -LocalPort 3389 `
    -Action Allow `
    -Enabled True `
    -Profile Any

# Remote Desktop - User Mode (UDP-In)
New-NetFirewallRule -DisplayName "Remote Desktop - User Mode (UDP-In)" `
    -Direction Inbound `
    -Protocol UDP `
    -LocalPort 3389 `
    -Action Allow `
    -Enabled True `
    -Profile Any