If endpoints are properly configured, you can use remote desktop launching mstsc.exe with the /restrictedAdmin switch, which does not require re-entering credentials and does not send the password to the remote computer. Per Microsoft's documentat...