Remote App Full Desktop Access

Hi,

I'm just carrying out some experiments with Remote App (which I've not used before).

Basically it seems to work with at least some of the apps I need to publish, but I have found that non-admin users can still log into the full desktop using the RDP client - I understood it was either remoteapp or full desktop, but my test system seems to allow either.

Have I missed a setting somewhere? I won't want the users to be able to log into the full desktop.

Thanks

p.s. it's Server 2016

David