You must add the computer account for the RD Connection Broker server to the TS Web Access Computers group on the RD Session ...