New-NetFirewallRule -DisplayName "allow 3389" -Direction Inbound -Action Allow -Protocol tcp -LocalPort 3389 -RemoteAddress @("10.72.15.168", "10.168.156.141")
