Users cannot remotely connect to a domain controller that is protected with the Windows Logon Agent via RDP