Many security features are baked right in. By default, a user cannot directly remote to his/her desktop; s/he must go through the connection broker. This is because the user’s account is not granted access to the local administrators or remote desktop users groups. The connection broker handles this portion. Also, the entire conversation is encrypted.