Open File, Print and RDP, enable RDP on next boot on a workstation via CMD - Domain profile only

netsh advfirewall firewall set rule name="File and Printer Sharing (SMB-In)" dir=in profile=domain new enable=Yes

netsh advfirewall firewall set rule name="Remote Desktop - User Mode (TCP-In)" dir=in profile=domain new enable=Yes

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f