We have a single RD Gateway which is used for Internal and External access for All Users. We use NLA, but we have issues with Users who are able to save Credentials into RDP Software, be it Remote Desktop Client or iTap Mobile. We see this as a huge security risk as we cant restrict which devices can connect.
What are we missing? Should/can we restrict the devices that connect or can we restrict saving of credentials when the connection is requested?