A. Ensure that the employee's device is joined to the domain.

B. Create a Group Policy Object that adds a restricted group that adds domain users into the Authenticated Users group.

C. In the local group policy, configure the Remote Desktop Connection Client to prompt for credentials on the client.

D. In Computer Management, add the Authenticated Users group to the Remote Users group.

E. Ensure that the Remote Settings configuration allows connections only from devices that run Remote Desktop with Network Level Authentication.

F. Create a Group Policy Object that enables the Windows Firewall to allow inbound Remote Desktop Exceptions.