I have a RDS 2012 r2 server that launches another RDP that automatically connects the user to their work desktop. We published it out to the web access and it all works well.
However many of our users would like to use their phone or mobile device to connect to their work computer. Microsoft published an app called Microsoft Remote Desktop which allows users to do that very thing. However the one big security risk is the fact that app stores the users username and password. So if a user leaves there iPad or phone somewhere anybody could pick it up and remote into that persons work computer without being prompted for a password. We need a solution that forces the client to be prompted for credentials even if they are cached.
I applied the group policy setting "always prompt for credentials" on the RDS server and this doesn't allow anybody on a desktop using the web access page to cache their credentials but it does not affect the app.
Is there anyway we could change something on either the RDS or RD gateway to always prompt for credentials even on the mobile app?