We have a Vista SP2 Enterprise user who was unable to RDP to her computer while it was on our domain network. This appeared to be due to user error, but while looking at her machine I found that there were FW rules for RDP that I couldn't edit. There were actually 3 listed, but two of them said "This rule has been applied by the System Administrator and cannot be modified" even though there are no GPOs applied, either through the domain or locally. I ran RSOP, checked it in GPEdit, and even went through each GPO separately in GPMC. Can someone tell me how these rules would be enforced otherwise? I see the Registry settings, HKLM\System\CCS\Services\SharedAccess\Defaults\FirewallPolicy, etc., but I'm not sure if there's something to look for there. Thanks.

Hi, Thanks for posting in Microsoft TechNet Forums. As I see, it seems to be more of Group Policy configuration in AD. I kindly recommend you to post in Windows Server Group Policy forums so as to get a better assistance. Dale Qiao TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com

Thanks. Done.