RemoteApp but do not allow RDP connections to DESKTOP

[luisguedes]

Hello, I am trying to configure an environment where it is possible to use RemoteApp but not allow conventional RDP connections to the full desktop of the server.

Scenario

• Users should access only applications published via RemoteApp.
• It must not be possible to start a regular RDP session that gives access to the full desktop.

My questions

1. Is there a native way in Windows Server to allow only RemoteApp and block full Remote Desktop connections?
2. If so, how can I configure Group Policies or permissions to prevent standard RDP connections while still allowing RemoteApp?
3. Are there any security or performance implications I should be aware of for this configuration?
4. If a native block is not possible, are there alternative approaches (e.g., firewall rules, ACLs, session scripts) that the community recommends?

Environment

• Windows Server version: 2022
• Current access mode: RDP + RemoteApp
• Goal: RemoteApp only, no access to full desktop

What I have tried

• Blocking via GPO and creating group rules
• Configuring RemoteApp Collections in RD Session Host
• Restricting user groups in Remote Desktop Users
• Searching for GPOs related to blocking the desktop

Any guidance or practical example that could help me achieve this goal would be greatly appreciated.

[EdenOaksConsulting]

I'm looking for the same functionality. The only thing I could get working on Server 2019 was a powershell script for Logon that checks users and whether explorer is running. gpedit.msc User Configuration / Windows Settings / Scripts (Logon/Logoff), set Logon script with this and set users to block RDP:

$RemoteAppUsers = @('User1','User2','User3')

if ($env:USERNAME -in $RemoteAppUsers) { 
	Start-Sleep -Seconds 5

	if (Get-Process -name explorer | ? {$_.SI -eq (Get-Process -PID $PID).SessionId} -ErrorAction SilentlyContinue) {
		logoff
	}
}

[carlosfelipeqco]

Hello,
Have you made any progress?
I'm trying to do the same.

[doronyaary]

Any news? Any solutions?

[lars18th]

I need this functionality. Any news?