Is it possible to set auto-connection to RDP on the user's desktop?

Question

Information Security

We have a server on WinServ2008R2.
It has RDP access. server in the cloud.
It's just that on every desktop there is a shortcut with 1C.
They open it and work.
A backup is set up so that if we are hacked today, we will only lose a day of work if the data is lost.
And one more question in pursuit Everyone has
a password glued to everything on their monitors.
And on the desktop there is a file with a password.
Is it very bad?
And how to deal with it?

Answer 1

outline to the authorities the risks of losing 1C databases due to saved passwords, offer to purchase smart cards in the form of USB tokens (etoken Java - 1400 rubles). Explain using the analogy with a bank card as an example: you need to have a physical object and know the pincode for it, if there is not one thing, there is no money (ie access). Explain separately and get them to confirm that they heard that you cannot (and no one can) decrypt the encrypted databases and you will have to pay hackers a lot of bitcoins, in the event of the described negative consequences.
If tokens are purchased, set up a domain security policy, raise an internal CA, prohibit password entry.
passwords in a corporate environment are very bad, much like using Excel for automation. Excel is worse.