How to prevent user group from RDP connection but allow RemoteAPP on Win Server 2012r2?

Question

Server equipment

How to prevent user group from RDP connection but allow RemoteAPP on Win Server 2012r2?

Answer 1

Do I understand correctly that clients need to be denied a full-fledged terminal login to the server, but leave the possibility of using published RemoteApp applications?
If so, then everything is quite simple. You need to make a new collection of RRS sessions, add the required user group to it, and select servers for the collection. Moreover, please note that for the RemoteApp collection you need to take a server that is not included in the collection of a full-fledged URS. So you can have two or more collections of both remote desktops and published RemoteAPPs. And for each you can set a list of users, who can use what resources.