I want to enable RDP access to our RDS Server for our office workers over OpenVPN to achieve better security than the current applied IP filtering on remote external IP's without VPN.
Because we cannot control the remote used (home) clients the OpenVPN connection should be locked down to only RDP access to the RDS server to not expose them more than necessary to the home clients that will be in the same LAN via the VPN connection.
I read https://community.spiceworks.com/topic/2252427-vpn-vs-rdp-access-restricted-to-one-incoming-ip but am looking for the correct way to approach this.