This recent post from microsoft describes how to mitigate some of the risk that got Palantir. https://blogs.technet.microsoft.com/johnromsft/2016/06/14/why-you

This recent post from microsoft describes how to mitigate some of the risk that got Palantir. https://blogs.technet.microsoft.com/johnromsft/2016/06/14/why-you-should-use-rdp-restrictedadmin/ https://blogs.technet.microsoft.com/johnromsft/2016/06/14/wh... "I can’t stress how important this change is – an administrator who connects using “normal” RDP exposes his or her credentials to the remote system with every connection. RDPRA, on the other hand, ensures that credentials aren’t exposed to the attacker on the remote computer being managed."