Windows 11 Remote Terminal server with a custom port across the internet

Reaching the credential dialog indicates the router forwarding, RDP listener, and firewall path are probably working; the remaining failure is authentication or authorization. On the Windows 11 PC, confirm it is Pro or Enterprise, Remote Desktop is enabled, and the intended account is an administrator or member of Remote Desktop Users. Use the account format that matches the device: PCNAME\username for a local account or AzureAD\email address removed for privacy reasons for an Entra-joined device. Enter the account password, not a Windows Hello PIN, and keep Network Level Authentication enabled. Changing port 3389 to 44710 does not make Internet-exposed RDP safe. Microsoft recommends external access through a VPN or Remote Desktop Gateway. Connect through the VPN using the PC’s LAN address, then remove the port-forward rule. If direct forwarding is unavoidable for a brief test, restrict the router rule to your source public IP, use a strong unique password, and disable the rule immediately afterward.