RDS 2012: allow RemoteApp ONLY

Hi,

How can I allow remoteapp only for a usergroup on RDS 2012 (with broker).
If I add users to remote desktop users they also can logon to the server which I don't want them to.

J.

Jan Hoedt