---
title: Limiting Applications on Windows RDP Devices Settings
slug: kronpam-reference-guide-3-9-0/limiting-applications-on-windows-rdp-devices-settings
description: Learn how to configure and limit application access on a Windows device session with Kron PAM. This document provides step-by-step instructions on setting permissions for Device Groups, selecting allowed applications, and changing application paths. Detai
docTags: 
createdAt: 2022-07-27T16:15:51.000Z
---

Kron PAM can limit the applications that can be accessed in a Windows device session. It is possible to set permissions for Device Groups for each application so that only limited applications can be run by the user. To adjust allowed applications on a Windows server, follow the steps below. In this example, the user is only allowed to use Google Chrome Web Browser.
To configure the allowed application path:

1. Navigate to **Administration **> **Remote Desktop App**.
2. Fill in the **Application Name **and **Path** fields.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/fUj1uDr4eLbs9-x_v7mNg_image.png" size="68" width="754" height="463" position="center" caption="Remote Desktop App" showCaption="true"}

To select the allowed applications from the Device Group tab:

1\. Navigate to  **Devices > Inventory > Device Groups**.

2\. Choose the desired **Device Group **and select** Remote Apps.**

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/IBgh2NrF78M26AsAvsZLu_image.png "Allow Remote App")

3\. Select which application will be allowed for the devices in this device group.



::Image[]{src="https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/uAF4jBnruUCMsIi760uPj_image.png" size="76" width="512" height="466" position="center" caption="Allow Remote App from Device Properties" showCaption="true"}

:::hint{type="info"}
If the desktop is disabled for a device group, a user who tries to make an RDP Proxy connection to a device in that group will be warned that **Remote Desktop is Disabled on the Device Group**.
:::

![](https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/W3elbVM6WGdTpp5LdEoP9_image.png "Warning Message When Desktop is Disabled on Device Group")

If the application’s path is different from the path defined in the** Administration **> **Remote Desktop App** configuration above, change the path on the device.

1. Navigate to  **Administration > Remote Desktop App.**
2. Choose the desired** Remote Application.**
3. Choose the **Edit Remote Desktop App **option.
4. Add/Edit the application’s name and path.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/dsQTyBeBQ1b0HhTW8wZMy_image.png "Remote Desktop Application Page")

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/OidmzGjVe3GBdtCHavG1O_image.png "Add/Edit Remote Apps")