Yesterday I noticed something.

The number of rules concerning RDP in the Windows Firewall with Advanced Security mmc differs. If you enable RDP before enabling the firewall rules, you will get two set rules per type, one for Public profile and one for Private/Domain profile. But If you enable the RDP rules when they say All and then enable RDP they one rule. Pictures inside blog.

Prior to enabling RDP Firewall exception:

Windows Firewall with Advanced Security before enabling RDP.

What it looks like if you enable RDP prior to enabling the firewall exceptions:

Windows Firewall with Advanced Security after enabling RDP.

So when you enable the RDP prior to the firewall, the firewall splits it up between Public and Private, Domain.