If corps. adhered to guielines noted here: https://www.stigviewer.com/stig/windows_10/2017-04-28/ , remote access and local unauthorized access would be eliminated.