While attempting to start a program with the Initial Application feature, which starts on connection by using the Microsoft Remote Desktop Connection Client to a Windows 2008 Server, the following error message appears:

Access is denied.

Or

The initial application you are trying to open is currently unavailable. Contact your administrator to confirm that the correct settings are in place for your client connection.

To define how users connect to the Windows Server 2008 to access programs by using the Microsoft RDP Client, you can configure RemoteApp deployment settings to allow users to start both listed and unlisted programs on Initial Application.

Note: Membership in the local Administrators group, or equivalent, is the minimum requirement to complete this procedure.

To configure the Windows Server 2008 RemoteApp settings, complete the following procedure:

1. Navigate to the Administrative Tools, and then Remote Desktop Services and start the RemoteApp Manager.

2. In the Actions pane of RemoteApp Manager, click RD Session Host Server Settings or in the Overview pane, beside RDP Settings, click Change. For the latter method you have to select the RD Session Host Server tab in the RemoteApp Deployment Settings dialog box.

3. To enable the RDP client to launch applications select the Allow users to start both listed and unlisted programs on initial connection, click OK.

   Note: If you select this option, users can start any program remotely from a .rdp file on initial connection.
   In the Access to unlisted programs sections, following two options are available:

   • Do not allow users to start unlisted programs on initial connection (Recommended by Microsoft)

   • Allow users to start both listed and unlisted programs on initial connection (Suggested for testing applications with RDP Client)

     

---

Problem Cause

With the introduction of Terminal Services Remote Application Manager in Windows Server 2008, Microsoft disabled the Initial Application feature by default.

Microsoft recommends this way to help protect against malicious users, or a user unintentionally starting a program from a .rdp file on initial connection.

This reference document addresses a change in the Windows Server 2008 product line that prohibits the RDP client from launching applications via Initial Program.

CTX124745- RDP or ICA Direct Desktop Connections Started by Non-Administrative Users Fail