What are the effective ways to deal with ransomware viruses?

Question

Malware

We have 3 rdp servers, about 100 clients are at their peak. Either one or the other will be caught by the ransomware and we roll back its files from the backup. Almost every day lately.
What are the ways to save users from downtime and IT people from unnecessary recovery work?
At the moment, all popular mail services are closed, access rights are configured for each user separately (but there are groups of 5 clients), 3 backups per day.

Answer 1

Prevent JS/HTA/WSF from opening on the machine.

Answer 2

machete