Here is a sample setup screen in SSH Tunnel Client:


Screenshot from SSH Tunnel Client setup
To set up your tunnel settings, enter the following:

You may choose to click "Auto connect" if you want this tunnel set up every time you start up windows.

VITAL: be SURE to click SAVE after every edit - if you just click CLOSE, it treats that as "delete this tunnel" - ouch!

Once you hit SAVE on the settings, you can activate the tunnel by double-clicking on its icon.
The icon changes to show a yellow lock when it is working (a lock since SSH is encrypted.)
Now, instead of asking to connect to the distant machine's IP address, you ask to connect to "localhost" or IP 127.0.0.1.
For Remote Desktop, connect to 127.0.0.1:3389 or if that gives an error message, try 127.0.0.2:3389 instead.

SSH Tunnel Client lets you have multiple tunnels open at once if needed. It can minimize into the system tray to limit screen clutter, and you can select the preference option to start SSH Tunnel Cient when windows starts up so it is always ready.