Dude I worked for in 2008 (small IT support company) insisted we store all the domain logins and passwords for all our customer's networks on our internal Sharepoint system and forward a port to RDP on all their domain controllers. It was a fucked up place to work with every procedure pulled out of someone's ass on the spot.