Originating Inbound traffic is normally blocked by firewall rules.
Originating Outbound traffic other than blocking standard RDP port, dont know. One could change the RDP port number on you and then not much you can do.
A) Turn off windows
B) Do not enable it, is disabled by default.
C) Disable remote desktop on that device.
X) You can not prevent any form of RDP also from other company programs...