Its likely that you've also realized how limited TS Web Access truly is. You can't limit which icons a user should see based on their credentials. There are few appreciable logs with which to audit user access, and there is no way (without some fancy development work and a SharePoint site) to aggregate RemoteApps across multiple servers.
To learn more and to read the entire article at its source, please refer to the following page, Ericom's Free PowerTerm WebConnect: TS Web Access on Steroids - Realtime Windows Server