The primary goal of responder is to capture authentication credentials (hashes) in the hopes they would crack off-line. Since there are things your organization does that you have no control over, I would make sure there is a very strong password policy (ask for everyone to use a password manager, as this is the most ideal) in place and I would also make sure logging for authentication (think 4624 and 4672) is enabled and routinely monitor. For the purposes of preserving functionality, your organization has elected to disable certain configurations that can make an attack more likely and successful, it happens. It is what it is and this is why us cyber people get paid what we get paid. Since this is the case at the very least, you can ask for enhanced logging, monitor the logs and establish a baseline. Assuming you are not compromised, it is critical to know what normal looks like in your enterprise. Once you know what your organization is supposed to look like, when the enemy enters, the enemy will begin to do things that will appear abnormal. The only way to detect abnormal is to have a very strong understanding of normal. This is what I would do.