question

RahulBorate-7269 avatar image
0 Votes"
RahulBorate-7269 asked ·

user give to access only on Remote app not on a remote desktop(GUI)

Dear Sir & Madam,

We are created domain & deploy the Remote application (RDP APP) & same app share with multiple client. But client is not in our domain.
i want to user restrict on Remote desktop GUI mode its only allow to access on RDP app.


i know both are base on same role.
Please suggest.

windows-serverwindows-remote-desktop-serviceswindows-server-2016windows-server-2012windows-remote-desktop-client
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

CarlFan-MSFT avatar image
0 Votes"
CarlFan-MSFT answered ·

Hi,
Based on my search, there isn't an "officially sanctioned" way to do this because by design users who have access to RemoteApp will have Remote Desktop access because same permissions apply to both services, actually both services are mostly the same. When a user starts a RemoteApp he is actually loggin on to the server, but can only see the application, and not the rest of the desktop.
But you could do something silly like use Group Policy to set the user's shell to be "logoff.exe" such that if they attempted to access the machine's desktop they'd be immediately logged-off.
Please refer to the information below:
Prevent log on to RDS Server Full Desktop
https://social.technet.microsoft.com/Forums/en-US/217841fc-4be1-49f9-8807-feec70b3e128/prevent-log-on-to-rds-server-full-desktop?forum=winserverTS#7f83a476-9a24-4071-a2c7-4d53b13f060d
Hope this helps and please help to accept as Answer if the response is useful.
Best Regards,
Carl

·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.