[23h2] Remote Desktop not working across subnet

[LytchettNM]

OK so we have migrated from windows 10 to windows 11 (bare metal install not in-place upgrade) 23H2 enterprise edition.

 

Now we can’t remote to the client from another client on a different subnet and I’m pulling me hair out, we can Remote from client to client within the same subnet so GPO’s to enable Remote Desktop and firewall to allow are correct but log’s of the receiving firewall show deny!

 

So what I have tried.

The original GPO that worked with Win 10 allow RDP.

Then tried a firewall rule to allow TCP 3389.

Now I have tired firewall rule to allow all TCP ports from the subnet in the IT support office to all clients and still it won’t work!

 

Can anyone suggest anything that I might not have thought of as I could do with some sleep 🤪

 

Thanks for any help.

[Olliedawg]

Did you try allowing UDP 3389 too?

 

I know Windows 11 uses TLS 1.3 by default now, not sure if that would have anything to do with it

[LytchettNM]

Ok so an update and conclusion

 

The issue is with the OS, come on Microsoft do some testing before blocking ports within the OS.

As far as I understand Win 11 home now doesn’t allow RDP but it also seems the enterprise version also doesn’t?

 

I went back to basics with a good old fashioned ping, with firewall disabled I couldn’t ping TCP port 3389 across our subnets but could within the same subnet what a massive waste of time🤬

 

And before someone says the issue is with our core network routing it works for Win 10.

 

So in the end the resolution was to change the TCP port for Remote Desktop to not be 3389 and everything now works

[LytchettNM]

after chasing my tail for many months, I have finally got to the bottom of the issue and it was NOT an OS issues but it is now Resolved.

 

It was our anti-virus product and contacting their support has resolved the problem plus they have report this to their backend as they do not believe it should have been an issue.