Network Level Authentication (NLA) requires RDP users to be members of the Remote Desktop Users group and have the “Access this computer from the network” user right assigned.

The Inspector General for the Treasury Department audit described cracks in the authentication process used for accessing the internal IRS network. None of the devices used to make 26,237 network ...

Use port forwarding capabilities built into SSH on the public-facing system to establish a Remote Desktop Protocol (RDP) session to an internal server (Server 1) using a domain service account.

There's also another tech note (102001) titled Use Login Window Mode for 802.1X authentication to a network which details how to use Login Window Mode on Macs to log in securely to an 802.1X ...