Sorry, but what should your post proove? That they disabled RDP or limited it to trusted IPs? Cause that's the only thing you can see there. I'd rather say that second screen shows how stupid their admins are to allow anyone to connect to their server machine with RDP from the outside.