How to make WinTPC a direct VDI w/2012 Server from login(SSO) Pooled VM Collection SOLVED !

Question

Pre-Reqs:
WinTPC machines must be domain joined
All VDI infrastructure is 2012(RD Web, CB, VH, GW) you might be able to use 2008R2 I did not use any so dunno..
All certificates must be in place for SSO
1. Setup 2012 VDI infrastructure to use SSO
2.Set group policy applied to WinTPC machines OU to allow Credential Delegation see:
http://blogs.msdn.com/b/rds/archive/2007/04/19/how-to-enable-single-sign-on-for-my-terminal-server-connections.aspx
3. Steal the RDP file from RDWeb (do a view source to get the path to the RDP file then download it) place in a network location, we use a folder in netlogon. Alternatively you could create your own RDP file and include the loadbalanceinfo:s:tsv://VMResource.1.MYPOOLEDCOLLECTION_Name
4. Use a GPO to set a Custom Interface on the WinTPC machines it should execute a powershell or vbscript that runs the .rdp file,  in our case we  use a logon script to copy a powershell script to the local machine, then use that
as the custom interface, it loops watching for the mstsc process to end..when it does it logs the user off. (sample)
#VDI-RDP.ps1
& 'c:\windows\system32\mstsc.exe' c:\start\myrdpfile.rdp
sleep -s 10
while(get-process mstsc){sleep -s 10}
logoff.exe
Custom Interface GPO is here:
User\Administrative Templates\System\Custom User Interface\
"powershell.exe" -windowstyle hidden c:\start\vdirdp.ps1
Voila !
When domain users login to the WinTPC they get a VDI session only... once they close the session either by logging off or closing the RDP session.. they are logged off of the WinTPC machine
MS really should document this somewhere.. not everyone wants to access VDI from  RDweb.... :(   nor do they wish to have to authenticate multiple times...
Good luck with it !

Answer 1

Thank you dear Steve for the detailed steps,
I have an issue to set the RD Web Access for SSO.
I followed below article without success and I saw your comment.
http://www.anilerduran.com/index.php/2012/sso-single-sign-on-thoughts-on-rds-remote-desktop-services-2012/
I am using RDS 2012 R2 environment.
Could you please provide more steps on how to run SSO for the RD Web?:
Point Number 2 is not clear.
 To turn on Windows Authentication:
              - uncomment <authentication mode="Windows"/> section
              - and comment out:
              1) <authentication mode="Forms"> section.
              2) <modules> and <security> sections in <system.webServer> section at the end of the file.
              3) Optional: Windows Authentication will work in https.  However, to turn off https, disable 'Require SSL' for both RDWeb and RDWeb/Pages VDIR.
                 Launch IIS Manager UI, click on RDWeb VDIR, double click on SSL Settings in the middle pane, uncheck 'Require SSL' and
                 click Apply in the top right in the right pane.  Repeat the steps for RDWeb/Pages VDIR.
Kind regards,