A Terminal Services connection authorization policy (TS CAP) allows you to specify the users who can connect to this TS Gateway ...

A Terminal Services connection authorization policy (TS CAP) allows you to specify the users who can connect to this TS Gateway server. A Terminal Services resource authorization policy (TS RAP) allows you to configure a mapping between user groups and the computers that they can connect to remotely through TS Gateway. You can use this wizard to create both authorization policies. Until you create both a TS CAP and a TS RAP, users cannot connect to network resources through this TS Gateway server.