You can configure a RDP Relay for Windows machines to allow users to remotely access these machine without the privileged account credentials.
For steps to configure, see Work Flow to Configure Privileged Access for Windows
NOTE:In Windows 2008 R2, configure the following User Account Control settings:
Disable Switch to the secure desktop when prompting for elevation.
Set UAC: Behavior of the elevation prompt for administrators in Admin Approval Mode to a value other than Prompt for credentials on the secure desktop and Prompt for consent on the secure desktop.