Comment by dpoloncsak

Pass-The-Hash attacks exist and the only real countermeasure is to never log into user machines with privileged credentials