---
title: Limiting Applications on Windows RDP Devices Settings
slug: kronpam-reference-guide-legacy-ui-3-4-0/limiting-applications-on-windows-rdp-devices-settings
description: Learn how to configure and limit application access on a Windows device session with Kron PAM. This document provides step-by-step instructions on setting permissions for Device Groups, selecting allowed applications, and changing application paths. Detai
docTags: 
createdAt: 2022-07-27T16:15:51.000Z
---

Kron PAM can limit the applications that can be accessed in a Windows device session. It is possible to set permissions for Device Groups for each application so that only limited applications can be run by the user. To adjust allowed applications on a Windows server, follow the steps below. In this example, the user is only allowed to use Google Chrome Web Browser.
To configure the allowed application path:

1. Navigate to **Administration **> **Remote Desktop App**.
2. Fill in the **Application Name **and **Path** fields.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/-j1ZXfAuU59RfmynlHjKP_image.png" size="82" width="855" height="230" caption="Remote Desktop App" position="center" showCaption="true"}

To select the allowed applications from the Device Group tab:

1. Navigate to **Device Management** > **Device Groups**.
2. Right-click the desired **Device Group** and select **Allow Remote App**.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/zDiKuPBSvMmkMuEFfFim8_image.png" size="92" width="781" height="221" caption="Allow Remote App" position="center" showCaption="true"}

- Select which application will be allowed for the devices in this device group.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/ewQgsEU_iAsEDv5AyAE-F_image.png" size="74" width="543" height="364" caption="Allow Remote App from Device Properties" position="center" showCaption="true"}

If the application’s path is different from the path defined in the** Administration **> **Remote Desktop App** configuration above, change the path on the device.

1. Navigate to **Device Inventory**.
2. Right-click the desired target device.
3. Choose the **Add/Edit Remote App** option.
4. **Add/Edit** the application’s name and path.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/oxYswqNkv-1pmfD_QA-AX_image.png "Add/Edit Remote Apps")