A Windows firewall rule permits inbound remote administration from every address. Only the help-desk subnet needs access. What change follows least privilege?

1. Rename the rule without changing its scope
2. Allow every inbound port from every source
3. Disable the firewall to avoid rule conflicts
4. Limit the rule to authorized sources and required service access