
Windows 2016 RemoteApps working fine but also enables Remote Desktop Connections.
How to disable remote desktop but allow remote apps.
Workaround => Start logoff script at logon

If this option doesn’t work on your Windows 2016 server don’t worry, according to Microsoft this is not a bug but rather a feature and you have to add lined in your registry as follows:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
Name: fQueryUserConfigFromDC
Type: Reg_DWORD
Value: 1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-tcp
Name: fQueryUserConfigFromDC
Type: Reg_DWORD
Value: 1