Port forwarding to non-3389 (internet-facing) port --> RDP port with secure password & lockout - is it safe for small home lab (2-3 computers) or am I going to get ransomwared inside
How To Change Default Remote Desktop Protocol (RDP) port 3389 in Windows Server 2008?
Windows Firewall scope is not working - Microsoft Q&A