Protecting RDP connections, full remote control In my workplace people are connecting with their PCs (with Windows on them) through basic RDP when they work from home. The only precaution taken is changing default 3389 port to a diffrent one and using strong password. This seems like a bad idea. There is no option to configure simple VPN to gain access to files because employees need to remotely use software that utilizes physical HASP keys- avaliable only on their computers. What is the correct approach in this situation?

Yes, RDP per se isn't secure enough to use over the Internet.

_There is no option to configure simple VPN_ \- why not? You should definitely use VPN to secure RDP access: set up a central VPN gateway, VPN clients and remove the port forwarding mappings from your NAT router.

Product recommendations are off-topic here however, but you could try on Software Recommendations.