We are having an issue with Remote Desktop Services 2012 (and R2) where when I publish an app or desktop all users on the domain can see all apps and desktops even if they are not in the group that is granted access (Domain Users was removed from the apps and desktop). I originally thought this was because we were running a 2003 domain. But I have recently upgraded to all 2012 R2 domain controllers and upgraded the domain and forest to 2012 functional levels. I have built a new instance of RDS and have the same issue. I see no events showing up under any of the servers.
In my test lab I can build a new domain and if I add RDS all works like it should . Only the users in the groups granted access to the RDS apps and desktops can see them.
Any idea where to start troubleshooting this?