What order or in what way are the resource authorization policies applied?

Question

I understand what RAP/CAP are and how they work and I know that the CAP are applied according to the order. The RAPs are not linked to a specific CAP. My question is how are the RAPs applied. You can obviously have a group or a nested group
in one or more RAPs. So does the connection attempt (after it gets by the CAP) get compared to all the RAPs before it is denied? I have been searching for hours and have not been able to find anything on how the RAPs are applied. I have both server 2012
GWs and server 2008 R2.
Thanks,

Answer 1

Hi,
Thanks for your post in Windows Server Forum.
When you associate an RD Gateway-managed computer group with an RD RAP, you can support both fully qualified domain names (FQDNs) and NetBIOS names by adding both names to the RD Gateway-managed computer group separately. When you associate an Active Directory
security group or an RD Session Host server farm with an RD RAP, both FQDNs and NetBIOS names are supported automatically if the internal network computer that the client is connecting to belongs to the same domain as the RD Gateway server. If the internal
network computer belongs to a different domain than the RD Gateway server, users must specify the FQDN of the internal network computer.
Might below articles useful for more understanding.
1.  Virtualization: Use the RD Gateway
2.  How To Work with RD Gateway in Windows Server 2012
Hope it helps!
Thanks,
Dharmesh