We limit RDP access via Cisco ACLs at our border routers. So that only the vendor IPs that require RDP access may get to those machines. And, we turn it on when

We limit RDP access via Cisco ACLs at our border routers. So that only the vendor IPs that require RDP access may get to those machines. And, we turn it on when they call opening a ticket for access. We don't leave it open to them all the time.