Remote Desktop and Remote Desktop Services

Anonymous
2023-11-11T18:01:10+00:00

I implemented Remote Desktop Services on a Windows Server 2019 member of an Active Directory domain.

On The "RD session host" I created a session collection to publish some applications.

Now the "Resource type" of the collection is "RemoteApp Programs".

From a client I start Remote Desktop Connection (mstsc.exe) and I see that I can create a Remote Desktop session, enter the username and password of a generic domain user and access the whole of the desktop of the RD Session Host.

As a generic domain user i would expect to be able to connect only via Web Access, not via Remote Desktop Connection.

Is it a normal behavior?

Is there any error in the configuration of the RD session host or of the Collection?

Regards

Windows for business | Windows Server | User experience | Remote desktop clients

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question. To protect privacy, user profiles for migrated questions are anonymized.

0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Anonymous
    2023-11-13T05:57:27+00:00

    Hello,

    Yes, this behavior is by default. Your RDS deployment is correct. Both RemoteApp and full remote desktop sessions leverage the underlying Remote Desktop Protocol and associated technologies to facilitate remote access.

    There is no straightforward way If you are expecting to restrict users from accessing full desktop, for workarounds, you could refer to this thread.

    Best regards,

    Karlie

    0 comments No comments