Solutions included (DirectAccess and different kinds of VPN.) Read more about setting that up on for example (v=ws.10).aspx and You may have this functionality in your firewall and if not, Windows Server comes with several remote access VPN(virtual private network)-solution and depending on their security demands they have one or more factors of authentication required to gain access. But when it comes to remote access for administration that I am guessing you want to achieve, most organisations use some kind of Most organizations make end user services like webmail and so on available directly from the internet (over ssl of course). MCT | MCSE: Private Cloud/Server, Desktop Infrastructure If it's windows devices you are working with, I would instead recommend you looking in to Connection Security Rules with windows firewall, where you can use AD Users/Groups to authenticate traffic. Since it's quite easy to spoof mac-addresses, It would be quite easy to steal the 'real' device ip address and mac address and in that way get 'authenticated'. However not something i would recommend you doing.

Since it's not possible with Windows Firewall, the way you sort of likeĬould achieve this is with static arp entries (you hard code a specific ip address to a specific mac-address as in my example below). A server (or a device) only knows the mac-addresses of devices in the same broadcast domain they reside in themselves, that means you can only filter on devices in the same subnets.

Secondly, 'authentication' with a mac-address can sound like a smart idea at first look but for two reasons it's not as good as you might thinkġ. First, unfortunately it's not possible to do authentication by mac-address in windows firewall.

Block remote desktop connection mac