First, turn on Remote Assistance locally on the target host and allow other computers to connect remotely.
Personal summary of the matters needing attention are: modify the default remote port. You can change the port directly by registering with regedit.
2 Map the external network.
Install and use nat 123 on the company intranet host (that is, the target access computer), and add the mapping external network. I use non-website mapping, so that when I visit the external network remotely, I can directly use the mapped external network address; Another way is full-port P2P penetration mode. In this mode, guest penetration needs to be installed and used at the access end at the same time, but it has a speed advantage.
Mobile phone remote control.