Ok, this isn’t a Linux thing at all. But something I have to do a lot and always forget the command. I can login to the PC and go through the Windows Firewall with Advanced Security UI to enable the Remote Desktop rules which are already there. But it’s much easier for me to just run it remotely using Powershell so I can enable it without interrupting the user.
The command I keep forgetting is
Enable-NetFirewallRule -DisplayGroup "Remote Desktop"
This will enable the remote desktop firewall group for all firewall profiles (Domain, Public, Private). Obviously don't open this up directly to the internet.