Restricting Users' Access to Applications in RDP Connections
On RDP connections you can specify which applications are visible to each user on the target Windows host. When adding or editing a host, the Applications entry allows you to specify visible applications to each host user separately:
Application Name (Required): is the name of the application visible to the user when connecting to said application. The name should be unique, and searchable.
Identifier (Required): the name of the application's executable, otherwise known as an alias (for example: mspaint, wordpad)
Arguments: command-line arguments to be passed to the application.
Directory: the working directory for the application.
Note that you need to configure the target Windows host to accept and use the remote applications you specify. For instructions about configuring applications for RDP, see see Publishing RemoteApps in Windows
Example of Remote App Programs in Windows Server
Example of Windows Application Restrictions in PrivX