How to guard against Zerologon and similar vulnerabilities

To stop all threats to the corporate infrastructure, you have to do more than just protect workstations.