Dont advice the users to forward the port for RDP

... because it breaks VRDE extension of VirtualBox. When you switch on VRDE to be able to connect look on your VM's via RDP viewer, VB offers an according port *on the host*, already. No need to make port forwarding.