I have my firewall setup to forward ports to IP addresses for remote desktop. What is the best way to make changes to Windows firewall to allow these connections to come through? If I turn the firewall off I can connect. There are relatively few ports used so I could add each port individually or would you suggest I make one entry and do it with a range of ports (what is best practice?)? This is a Windows 2008R2 domain with Hyper-V, 1 2008R2 VM server, and 2 XP and 5 Win7 PCs.