RemoteApp without RDSH logon

Hi,

I'm running Windows Server 2012 as a RDSH server.

The employees should not be able to logon to the RDSH and only use RemoteApp's.

Is it possible to only allow RemoteApp's without the logon permission to the RDSH?

regards,

TAntony