I'm creating a nested vm user desktop inside Windows 10 Enterprise. I'm using the hyper-v console, not mstsc.exe. The user desktop vm needs to use a headset and microphone which requires Enhanced Session Mode with audio playback and recording. There you can also choose to redirect the host drives or not. I'm looking for a technical control, either on the host or vm, to block access to the redirected drives of the host from inside the vm.
The GPO for TS/RDS blocking drive redirection do not work, including the reg key fdisablecdm . Neither does using 'net use /delete' or applying icacls ACLs to the \tsclient\ shares.