Limiting RDP through PAM interface, and not Windows rdp etc - GPO?

Limiting RDP through PAM interface, and not Windows rdp etc - GPO?

I would like to make using the PAM interface the only way to RDP/ssh to servers.  Is anyone else doing this?  And if so, how.  GPO? 

                New to ADSelfService Plus?