WRDP access
The browser and mstsc can use different corporate exits. The field keeps the last IP that actually established RDP. If it changes, run this on the same work laptop and paste the result: curl.exe --noproxy "*" -4 https://api.ipify.org.
Then use mstsc to connect to wrdp.primoart.ru:33989. The window remains open for 30 minutes, so failed login attempts do not require another TOTP code.