I have spent hours looking at all of the forum posts and tried all of the solutions and am still not able to remove the dialogue box. Here are the details:
This is a brand new 2008 R2 box with all of the updates installed to date.
Remote Desktop services is installed with the following roles: RD Web Access, RD Gateway, RD Session Host
It is not part of a farm
It is a member server in an AD domain
I have a public certificate from GoDaddy which meets the requirements for signing apps and matches the FQDN of the RD server.
I have set up the GPO to Specify SHA thumbprints and added the thumbprint to the list (it's the only one in the list) done with all caps, all lower case, spaces, no spaces and have even thought of trying it with the Cyrillic alphabet. I've run gpupdate /force, rebooted, drew a map and showed it a picture of what it should be doing, all to no avail.
Windows firewall is turned off and I am on the same LAN segment as the server so there is nothing between my client systems and the server. I am using a Windows 7 Pro computer and a Server2008R2 box as test clients.
My test users can log in to the RDweb site with SSO no problem. There are no issues with the certificate (everything is green and a lock shows up) the applications show up where they are supposed to be, but when you click on one of the apps, you get "A website wants to run..." the publisher shows up correctly on the warning (the FQDN of the server listed on the certificate) so it would appear that signing the apps in RemoteApps Manager is taking affect. I know at least part of the GPO is being applied because those options are taking affect, but for some reason this one is not. It doesn't make any difference whether it is a domain computer or a non-domain member, I still get the warning. The apps I'm using for testing purposes at this point are Calculator, Paint and Wordpad. If I click Connect, the apps run without any difficulty, I just don't want the clients to see the warning. This is strictly a RemoteApp set up, no user desktop involved.
I do not want to have the clients check don't show me this again, I really need to not have it show up at all.
What am I missing?
Thanks in advance.