WVD Windows 10 multi session - restrict user to single folder to download/store files

Hi srasp!

actually there are multiple ways to achieve what you like.  

The first thing that comes into my mind is to use Ephemeral OS disks for your Session Hosts. These give you the advantage that any changes made the the OS / data disks will be reset when the machine gets deallocated and restarted (comparable to non-persistent VDI).(More Info here: https://www.youtube.com/watch?v=GyXx5Er9jYo&list=PL-V4YVm6AmwXGvQ46W8mHkpvm6S5IIitK&index=19) 

To provide your users a space where they can work you could use OneDrive or you create a network share / drive where your users can work exclusively, if necessary this can also be purged automatically via PS script in the task scheduler of the server / machine.

For the purging you could use the following command to delete files, that haven´t been modified since 30 days (the number of days can be changed of course):

ForFiles /p "C:\path\to\folder" /s /d -30 /c "cmd /c del /q @file"

Hope this helps.  

srasp not sure about the GPO but have you taken a look at FSLogix app masking? If not, sharing link for the reference. It can effectively help you to hide / restrict access to directories as well as to applications. https://docs.microsoft.com/en-us/fslogix/application-masking-rules-ht

About requirement of periodically removing files, you can simply write a PowerShell script and put it in the host machine's task scheduler. 

Hope it helps you.