Choose what profiles the rule will apply to.Check the Allow the Connection radio botton and click Next.Note: The port number will be different if you have choosen not to use the default VNC Server port. Check the TCP and Specific local ports: radio buttons and enter port 5900 in the Specific local ports: field and click Next.Check the Port radio button and click Next.Expand the Computer Configuration/Policies/Windows Settings/Security Settings/Windows Firewall with Advanced Security/Windows Firewall with Advanced Security/Inbound Rules node.Edit an existing Group Policy object or create a new one using the Group Policy Management Tool.To VNC Server on computers using the Windows Firewall with Advanced Security (Windows Vista, Windows 7, Windows 8, Windows Server 2008, Windows Server 2012) please follow these instuctions. These are part of the Remote Server Administration Tools (RSAT) availabale form the Microsoft web site. You will require the Group Policy Management Tools on Windows 7, Windows 8, Windows Server 2008, Windows or Server 2012.

How to allow VNC Server through the Windows Firewall with Advanced Security using Group Policy

Realvnc server portable