RDS with network segmentation

Question

Hi,

We have an environment that is not connected to the internet.

This environment contains Windows Servers 2022 and Windows client 10/11.

To be able to access this environment remotely, we have to use Cisco VPN and when the VPN is connected we do a RDP to a Windows Server 2022 Jump Host. And from there we can access the rest of the environment. There are many vendors that are connecting to the environment

So for example when vendorA connect with VPN, they select vendorA profile in the Cisco VPN application, and are then allowed to access subnetA

When vendorB connect with VPN, they select vendorB profile in the Cisco VPN application, and are then allowed to access subnetB.

And so on....

What we see now is that we do get a lot of Windows Server 2022 Jump Hosts, so we would like to see if it is possible to use RDS instead. But if vendorA and vendorB connect to the same RDS, I guess it is not possible network segment this ? If you understand my question, since the RDS has access to both subnetA and subnetB, there is no windows function that can separate this based on logged in user ?

Any comments, or suggestions regarding this ? What kind of jump access do you use if you have several vendors connecting ? Do they for example connect to a jumphost and all the applications are installed there, or is the jumphost "clean" and they have to do a RDP to the actual application server ?

Thanks for reply

/R

Andreas