Aug 16 2023 07:47 PM
Aug 16 2023 07:47 PM
I have applied MSIX app attach application in one Remote Desktop host pool. The app attach application is published in the Default Remote Desktop application group (DAG). Assignments are granted to users who need remote desktop access. We would like to limit the access of the app attach application to only some of those remote desktop users (e.g. 100 users have access to the remote desktop but only 10 users can see the app attach application and launch it). This can be done with FSLogix app masking rule for locally installed applications. How can we enable App Masking to the MSIX app attach application?
Based on this Q&A, the only way to grant permission to users is by means of Remote Application group assignments.
I have opened MS case and the support engineer confirmed that the user assignment is based on application group level. There is no option to allow some users in the same DAG group can see the MSIX app attach application , while the other users cannot see it.
Please kindly share any information or comments or tips & tricks
Aug 22 2023 05:53 AM
Aug 23 2023 06:57 PM
Thanks for your comment. Understood Remote App group with specific assignment to an AD group can limit access of app attach application to a group of users. However our requirement is giving full desktop experience to users while we still can control only a few users can access specific application (e.g. 100 users have access to the Remote Desktop session but only 10 of them can launch MS Office from the Start menu of their remote desktop sessions). This can be achieved with FSLogix app masking rule. We would like to explore the capabilities of MSIX app attach to providing similar masking feature.
Oct 18 2023 10:15 AM
Oct 30 2023 07:44 AM - edited Oct 30 2023 07:45 AM
I've watched this twice now and I don't think they actually answered Raymond's question. They talked about winget identifying store apps but there was nothing about how to selectively allow app-attach apps within a Full Desktop session. I also have the same question as Raymond. I get that a Remote App could be added and controlled by assignment, but the Remote Apps are not available within the full Desktop session.