Windows Terminal Server 2012 Help

Hi all,

We have just bought a new Windows Terminal 2012 Server and we are having a bit of trouble.

I have installed remote desktop services and have created a RAP and CAP through the RD Gateway Manager. I have created a policy that allows users in a specific security group to be able to log on to this machine with access to programs that I have chosen.

However, any one of my users can access this machine and they can access everything they want including server manager etc.

Any ideas what I'm doing wrong?

Thanks