Thanks for contacting 2X Forums. In order to prevent RDP desktop access to your end-users you should install 2X ApplicationServer with a secure gateway in-between your terminal servers and your end-users hardware so direct network access isn't possible. Applications can then be published using the 2X ApplicationServer