Hello all,

I'm having in issue with RDS hosted on 2012 server. Let's say I have 2 applications hosted my RDS session host server, and only 2 users (users a and user b).

user a has access to both applications, while user b has only access to 1 application.

RDS access is given through the user group in the properties section, and permissions are set at the application level "User Assignment" to reflect the above statements.

Both user A and user B still have access two the applications and they both show up under the RDWeb application as well.

I am at a lost of what's going on here. If someone could please help, that would be awesome!

Hi,

As you have commented that you are using User Right Assignment, still suggest to recheck the configuration. It will apply on collection level also, as when we apply the setting we need to apply the configuration on specific collection. The RemoteApp programs can only be assigned to domain users or domain groups, not local users or local security groups. If a user logs on to RD Web Access with a non-domain account, all RemoteApp programs will be displayed.

You can check following article for information.
Windows 8 / Windows Server 2012: Session based Desktop Deployment
http://blogs.technet.com/b/askperf/archive/2012/11/02/windows-8-windows-server-2012-session-based-desktop-deployment.aspx

Introducing RemoteApp User Assignment
http://blogs.msdn.com/b/rds/archive/2009/06/12/introducing-remoteapp-user-assignment.aspx

Hope it helps!

Thanks.

Thanks Dharmesh for the response.

I agree, I've checked this thing like 50 times and have also reviewed those sites a couple of different times.

Here is a little bit more about my setup incase it helps.

I have:

two brokers in HA

two RDweb servers

two session host servers

one collection

All users that have access are on the same domain as the RDS setup.

Domain users group has access to the setup, and applications where I have not setup "User Right Assignment" 3 applications like outlook.

Then I have about 20 applications that I use "User Right Assignment" for. Again the users that have access to the server are domain users. I do not use individual domain accounts but security groups, as it's easier to manage..

Hope this sheds some light, and thank you for the help!

Also I noticed that permissions is working for me, but not for a majority of the other users. I would think that it would have been the other way if anything since I am a domain admin and they are only domain users...

• Proposed as answer by Dharmesh SMicrosoft contingent staff, Moderator Monday, March 09, 2015 8:40 AM
• Marked as answer by Dharmesh SMicrosoft contingent staff, Moderator Tuesday, March 10, 2015 2:31 AM

Hi,

Any update for your case?

Thanks.

Sorry for the late response, this is still an issue.

I can't seem to figure out while this permissions work for some users and while some users get full access to the applications. It's driving me insane, sad part I can't seem to find a hint anywhere that could lead me in the right direction.

Can you please mark this as unanswered if possible, or is this something I can do and just don't know how to?

On second thought I guess I just needed to read the link you posted a third time!

Introducing RemoteApp User Assignment
http://blogs.msdn.com/b/rds/archive/2009/06/12/introducing-remoteapp-user-assignment.aspx

Got it working now!

Thanks for the help will be marking yours as the answer