I'm trying to find an answer to something fairly basic, however, I'm getting to the point where I'm thinking that this is not possible. I wanted to bounce it off you folks.
So I have a Terminal Server farm that hosts various RemoteApps that is delivered to my users. This is the only information they need to access on the Terminal Server, works just fine. What I'm trying to prevent is the ability for the users to log onto the Terminal Server in full desktop mode. Since all of the apps they need are available via RemoteApp, there is no reason for a user to preform a full desktop login and I'd like to close this hole so a user can't login this way and run amuck.
Is this possible to do somehow? The environment is currently 2008 R2.