You can set up the terminal server such that particular users always log in to ts-shell, which limits what the user can do.
The only functions available on ts-shell are commands that directly relate to establishing connections to target systems. Other functions on the terminal server are fenced from ts-shell users.
ts-shell can be configured to permit connections to only specific target systems, for ts-shell itself and for individual users.