Allow RDP in the domain https://learn.microsoft.com/en-us/answers/questions/370650/group-policy-entry-to-allow-remote-administration