Requirements: A company Windows Server involves some of the company's important projects. So you need to allow only the designated public network IP to login! This is achieved through the IP Security policy of Windows.
Note: First release yourself, then go to deny others to connect
Operating system: Windows Server 2003
1.
Locate "Start", "Administrative Tools", "Local Security Policy"
(1) Creating an IP Security Policy
Right-click on the right side of the space to create an IP installation policy
650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M02/83/BB/wKiom1d7Vd-QrI1GAAAs9wylme4942.png-wh_500x0-wm_3 -wmp_4-s_4068475127.png "title=" qq picture 20160705143734.png "alt=" Wkiom1d7vd-qri1gaaas9wylme4942.png-wh_50 "/>
Click "Next"
IP Security Policy Wizard: Naming (3389 filtering)
Click "Next"
Activates the checkmark for the default response rule.
Click "Next"
Edit the checkmark of the attribute to remove
Click "Finish"
(2) Add IP filter List
Double-click the 3389 that you just created to filter that policy
Named to allow 3389 connections
Select the IP filter list, select Edit, and then select Add
650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M00/83/BC/wKiom1d7V97TRC13AAA3Nie9ehc477.png-wh_500x0-wm_3 -wmp_4-s_2857942628.png "title=" qq picture 20160705144627.png "alt=" Wkiom1d7v97trc13aaa3nie9ehc477.png-wh_50 "/>
Click "Next"
Remove the mirror from the hook.
Source Address Select a specified IP (your native IP)
Destination Address Select any IP
Protocol Selection TCP Protocol
Port selection 3389
(3) Creating an IP filter action
Create an IP filter action after the IP filter list is selected
650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M00/83/BC/wKiom1d7WRvzx2QxAABPFVFiXbk699.png-wh_500x0-wm_3 -wmp_4-s_2463157889.png "title=" qq picture 20160705145150.png "alt=" Wkiom1d7wrvzx2qxaabpfvfixbk699.png-wh_50 "/>
Click "General" after adding to name the IP filter action (allow).
Security measures: Select "License" (allow or block critical security measures in this case)
Conversely if the required IP is blocked
Security measures: Blocking
Similarly: Create IP filter Lists to add a number of allowed or blocked IP addresses
After the creation is complete above
Assign the IP security policy that you created. This IP security policy is working!
650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M01/83/BC/wKioL1d7WmPz3Q6pAAAYnSzmxkA021.png-wh_500x0-wm_3 -wmp_4-s_615450973.png "title=" qq picture 20160705145650.png "alt=" Wkiol1d7wmpz3q6paaaynszmxka021.png-wh_50 "/>
This article from "The Dark before Dawn" blog, declined reprint!
Windows Server IP Security Policy