Assign APM resources based on sAMAccountName

For the RDP, instead of having multiple resources per user, you could define a single RDP resource.

Then set the hostname attribute of the RDP resource to a session variable such as %{session.rdp.addr}. This way you could assign the same RDP resource to each user.

For the conditional based resources assign, use the "Advanced Resource Assign" policy object and use the conditional to check the group membership before resource assignment.

Another thing which has worked for me is to make the Conditional resource assignment as a separate macro-call. This will let you factor out your policy and use this block in a different part, for e.g. different OS platform or mobile device access, etc.

Best.