The Super User question Is windows remote desktop secure? describes Network Level Authentication (NLA) and how to configure it in Windows Server 2008. Unfortunately, the GUI option to configure NLA is gone in Windows Server 2012.
How do you require NLA or limit RDP clients so that only new, higher security client connections can be established?