add rdp restriction in secure your device

network/secure_your_own_device.markdown

@@ -40,6 +40,23 @@ This will enable more restricive firewall settings.
 Go to **Settings** > **Update & Security** > **Windows Security** > **Open Windows Security**,
 check that all is green.
 
+### Remote Desktop
+
+When you enable Remote Desktop will this be per default world wide open.
+
+You can restrict it with a powershell in admin mode.
+
+```powershell
+# Allow just current subnet.
+Set-NetFirewallRule -DisplayGroup "Remote Desktop" `
+                    -RemoteAddress "LocalSubnet"
+
+# Allow just current subnet and eth vpn networks
+Set-NetFirewallRule -DisplayGroup "Remote Desktop" `
+                    -RemoteAddress "LocalSubnet", 10.5.0.0/16, 10.6.0.0/16
+```
+
+
 Linux
 -----