I wonder if this tool only checks if the patch is present or checks in depth if RDP is disabled. Verification with Windows XP is inefficient.
I guess it checks if patch has been applied: https://www.welivesecurity.com/2019...ct-rdp-internet/#eset-bluekeep-detection-tool
Often I can't use these tools probably for my overly protective settings. As you can see, it doesn't work in my PC: https://msfn.org/board/topic/180831-it%E2%80%99s-time-to-disconnect-rdp-from-the-internet/