Modifying the Remote Desktop Service collections

Complete the following steps to modify your Remote Desktop Service (RDS) collections:
  1. Connect to your RD Connection Broker server, open a PowerShell window, and type the following commands:
    PS C:\Users\Administrator> Set-RDSessionCollectionConfiguration -CollectionName QuickSessionCollection -CustomRdpProperty "authentication level:1:2 >> pre-authrntication server address:s:https://win2k12adfs. win2012adfs.com/rdweb >> require pre-authentication:i:1"
  2. In the RD Web Access server computer, navigate to
    C:\Windows\Web\RDWeb\Pages
    , and edit the
    Site.xsl
    file by commenting-out or deleting the following lines.
    <td> <a id='PORTAL_SIGNOUT' href="javascript:onUserDisconnect()" target="_self"> <xsl:value-of select="$strings[@id = 'SignOut']"/> </a> </td>
    This edit ensures that a user is forced to close the browser to end the session. Also, the next time that the user logs on, the user cannot skip the AD FS page for two-factor authentication.