Windows RDP lets you log in using revoked passwords. Microsoft is OK with that