You must configure the following two security groups on the Remote Desktop Connection Broker (RD Connection Broker) server:

Configure the TS Web Access Computers group

For a Remote Desktop Web Access (RD Web Access) server to display RemoteApp and Desktop Connection from an RD Connection Broker server, the computer account for the RD Web Access server must be a member of the TS Web Access Computers group on the RD Connection Broker server.

You must also add the computer account for the RD Connection Broker server to the TS Web Access Computers group.

Membership in the local Administrators group, or equivalent, on the RD Session Host server that you plan to configure, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at http://go.microsoft.com/fwlink/?LinkId=83477.

To configure the TS Web Access Computers group
  1. On the RD Connection Broker server, click Start, point to Administrative Tools, and then click Computer Management.

  2. In the left pane, expand Local Users and Groups, and then click Groups.

  3. In the right pane, double-click TS Web Access Computers.

  4. In the TS Web Access Computers Properties dialog box, click Add.

  5. In the Select Users, Computers, Service Accounts, or Groups dialog box, click Object Types.

  6. In the Object Types dialog box, select the Computers check box, and then click OK.

  7. In the Enter the object names to select box, specify the computer accounts of the RD Web Access server and the RD Connection Broker server, and then click OK.

  8. Click OK to close the TS Web Access Computers Properties dialog box.

You can also add the computer account for the RD Web Access server to the TS Web Access Computers group by using the Remote Desktop Connection Manager tool. For more information, see Configure RemoteApp and Desktop Connection Properties.

Configure the Session Broker Computers group

If you have installed and configured a Remote Desktop Session Host (RD Session Host) server to provide redirection to virtual desktops, you must add the computer account for that computer to the local Session Broker Computers group on the RD Connection Broker server. For information about configuring an RD Session Host server for redirection, see Configuring an RD Session Host Server to Provide Redirection to Virtual Desktops.

If you have deployed a load-balanced RD Session Host server farm to provide RemoteApp programs through RemoteApp and Desktop Connection, add the computer account for each RD Session Host server in the load-balanced RD Session Host server farm to the Session Broker Computers group.

Note

The Session Broker Computers group on the RD Connection Broker server must also contain the computer accounts for any Remote Desktop Virtualization Host (RD Virtualization Host) servers that are hosting virtual machines used for RemoteApp and Desktop Connection. The computer account for an RD Virtualization Host server is automatically added to the Session Broker Computers group when you add the RD Virtualization Host server by using the Remote Desktop Connection Manager tool. For more information, see Add an RD Virtualization Host Server for RemoteApp and Desktop Connection.

Membership in the local Administrators group, or equivalent, on the RD Connection Broker server that you plan to configure, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at http://go.microsoft.com/fwlink/?LinkId=83477.

To configure the Session Broker Computers group
  1. On the RD Connection Broker server, click Start, point to Administrative Tools, and then click Computer Management.

  2. In the left pane, expand Local Users and Groups, and then click Groups.

  3. In the right pane, double-click Session Broker Computers.

  4. In the Session Broker Computers Properties dialog box, click Add.

  5. In the Select Users, Computers, Services Accounts, or Groups dialog box, click Object Types.

  6. Select the Computers check box, and then click OK.

  7. In the Enter the object names to select box, specify the computer account for each RD Session Host server that you want to add, and then click OK.

  8. Click OK to close the Session Broker Computers Properties dialog box.

Additional references