After these steps are performed:
The authorized domain user logs on to the Windows domain and can access the mainframe applications.
The user’s sessions are connected over a secure TLS protocol.
The user cannot alter settings because Reflection Desktop v16.2 has been locked down.
The user experience has not been disrupted.
Now, the details: