windows security for remote access

[Guest dg2099@gmail.com]

my company manages several domains that are unconnected by a LAN and

are different legal entities. My department however is responsible

for all these companies' PC and server management and we use RDP to

get into them all. The problem is, short of creating unique domain

admin user/passwords on each domain, i have no way of tightening

security so i can

 

A) know who logged in and when they disconnected or logged out

 

B) when they leave my department, or the company, disable their access

to all the domains with a few keystrokes.

 

Any help would be greatly appreciated. I want them to have the access

they need to do their job but need to be able to track who does what

and a disgruntled ex-coworker could keep the password in memory or

write it down and really do some damage on one of these many many

domains. Thanks in advance!