Deny any RDP connections except RemoteApp. How?

Question

RDP

Windows Server does not allow a RemoteApp session if the user or group it belongs to is not in the "Remote Desktop Users" group. If you add a user to this group, then he gets access to the RemoteApp session, but also gets access to the RDP session.
How to make sure that only users of a certain group have access to a full RDP session, the rest - only access to RemoteApp applications?

Answer 1

There are two options.
1. In the RDP settings on the server, find the setting "Start the following program when the user....":
and add
Path c:\windows\system32\logoff.exe
Start in: c:\windows\system32
This will affect everyone server users.
2. In the settings of each account that needs to be denied login via RDP - in the account properties there is a login script - you can do the same as in paragraph 1.
Accordingly - if you want to automate this through a group - you can do this with politicians or a periodically run script.

Answer 2

Where is the jQuery library connection?