I can no longer connect through the handheld, after I activated RDS CALs. It worked fine when it was in "trial" mode, prior to activation.
I have tried reducing security levels and disabling NLA. I can login to Server 2016 RDS from a different desktop using the same user account.