Wiz.io alerts saying VM has RDP Open on temp VM

[MyqlGodfrey]

I am just starting to create these images in my company. I have a DEV subscription setup and created a VM to start making sure everything works (which it does..if I add the "ExcludeMdeAutoProvisioning" tag). In my testing, I got an alert from our security group (wiz.io alert) :
Publicly exposed Windows VM on port 3389.
Which alerts on the temporary VM that Packer makes.
Has anyone else seen this? And more selfishly, how do I get RDP (port 3389) to NOT be enabled through configuration (I dont want to be changing powershell or packer files in my CI/CD pipeline.
Any help would be appreciated... thank you in advance!
-M

[MyqlGodfrey]

I found this (after searching with lots of different combinations): #3192 , I am surprised RDP is open and would still love any feedback anyone has.