A report from the Center for Internet Security explains how organizations, including state and local governments, can use Microsoft's remote-access service more safely.