When Connecting to a RD gateway the client checks the server certificate. If the certificate is not trusted the client cannot connect, but he can install the server certificate in his local store and the he will be able to connect.
Is there a way to prevent clients from installing certificates this way?