2x server and client have been set up to allow client to use/see one software on the server. How do you lock the client down so they can't use the same credentials to remote desktop and see the entire server?
You can block RDP access form clients to Terminal Servers by a windows firewall rule. Only 2X Gateway must allowed to the RDP service on Terminal Servers.