Many thanks for that tip Marcos - the wizard uncovered the ip address used by my CISCO VPN so I was able to add the private ip range so that multiple workers could use RDP to gain access to their workstations. Far safer than simply opening the port for "any" access from anywhere. Remote users have to authenticate through the CISCO before they will be able to use Remote Desktop from outside our internal network.
It also uncovered a problem between an HP Multi-functional printer which provides e-Print services to remote users who print from mobile devices to the office printer [iDS was blocking them].
Problems solved - thanks
John