I'm creating a nested vm user desktop inside Windows 10 Enterprise. I'm using the hyper-v console, not mstsc.exe. The user desktop vm needs to use a headset and microphone which requires Enhanced Session Mode with audio playback and recording. There you can also choose to redirect the host drives or not. I'm looking for a technical control, either on the host or vm, to block access to the redirected drives of the host from inside the vm.

The GPO for TS/RDS blocking drive redirection do not work, including the reg key fdisablecdm . Neither does using 'net use /delete' or applying icacls ACLs to the \tsclient\ shares.

migrated from serverfault.com Aug 13 '18 at 15:38

This question came from our site for system and network administrators.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.