Win Srv 2008 R2 DC interfering with Win Srv 2012 R2 RDS RemoteApp functionality during program opening by any user

Question

I have a small LAN with a Win 2008 R2 SRV as DC, File Server and App Server for QuickBooks and QB POS, and a VMware 5.1 host that has three utility servers running on it. One of these three is a Win 2012 R2 SRV config'd with these RDS roles (RD Session Host,
RD Connection Broker, RD Web Access, RD Licensing and RD Gateway) installed as a single server solution, simply because we're only servicing a few users. RDS roles were installed and configured before installing the MS Office 2013 and QuickBooks apps. I created a
simple Collection and setup the RemoteApps for access.
Initially I had only installed the RD Session Host, Connection Broker and Web Access. Installed the Apps, restricted access to only the RemoteApps and tested their ability to open via an internal connection from within the LAN in browser, minus the SSL errors
and .local address everything worked fine when a user authenticated. I installed the Licensing component and activated it and the internal LAN connectivity continued to function. I then installed my single SSL cert and configured it for use in each requiring
RDS role, opened port 443 thru my firewall to the RDS server and then began testing connectivity from external browser, at this point I initially encountered rights errors with my RDP users group, they were being denied logon access, it seemed
the Win 2008 R2 DC is mixed in the middle of the auth cycle of course so I straightened out that problem via GPO. I then again attempted to login via external source and now could login and obtain access to the RDS Web Access page showing my RemoteApps
BUT now when I click on an App to open it as either a user or Admin it attempts to Auth the process thru the Win 2008 R2 DC instead of directly to where the App is run from on the 2012 RDS server and gives me this error...
RemoteApp Error: Windows cannot start the RemoteApp program. The following RemoteApp program is not in the list of authorized programs:
Further details can be added to this but has anyone encountered this problem with a similar setup?
Thanks
NeoPaladine

Answer 1

Yes, but thanks for bouncing all of the ideas.
I saw that I was receiving Event Error 201 each time a failed RemoteApp load would occur, followed the trail for that and found the following that fixed it!
http://blogs.technet.com/b/networking/archive/2010/01/14/remote-desktop-gateway-client-fails-authentication-with-your-user-account-is-not-authorized-to-access-the-rd-gateway.aspx
Specifically this step:
Solution 1
Register the NPS server in Active Directory:
In Server Manager, browse to the following location:
Roles\Network Policy and Access Services\NPS (Local).
Right click on the NPS (Local) node and choose Register server in Active Directory.
Click OK to authorize the server when prompted.
Once I registered as above the RemoteApp's loaded perfectly both internally and externally when requested.
Thanks for leading me in the right direction!
Brent
NeoPaladine