Limiting RDP through PAM interface, and not Windows rdp etc - GPO?

I would like to make using the PAM interface the only way to RDP/ssh to servers. Is anyone else doing this? And if so, how. GPO?