WVD Windows 10 multi session - restrict user to single folder to download/store files

[srasp]

Hi all,

we plan to set up WVD with Windows 10 multi session. The requirement is to restrict the user to a single folder to download/store files. Additionally, the files should be deleted after certain period of time.

Would this be feasible? Would this be controlled by GPO or FSLogix. Please apologize if it is a stupid questions.

Thank you in advance

Seb

[#2]

@srasp not sure about the GPO but have you taken a look at FSLogix app masking? If not, sharing link for the reference. It can effectively help you to hide / restrict access to directories as well as to applications. https://docs.microsoft.com/en-us/fslogix/application-masking-rules-ht

About requirement of periodically removing files, you can simply write a PowerShell script and put it in the host machine's task scheduler. 

Hope it helps you.

[#3]

Hi @srasp!

actually there are multiple ways to achieve what you like.  

The first thing that comes into my mind is to use Ephemeral OS disks for your Session Hosts. These give you the advantage that any changes made the the OS / data disks will be reset when the machine gets deallocated and restarted (comparable to non-persistent VDI).(More Info here: https://www.youtube.com/watch?v=GyXx5Er9jYo&list=PL-V4YVm6AmwXGvQ46W8mHkpvm6S5IIitK&index=19) 

To provide your users a space where they can work you could use OneDrive or you create a network share / drive where your users can work exclusively, if necessary this can also be purged automatically via PS script in the task scheduler of the server / machine.

For the purging you could use the following command to delete files, that haven´t been modified since 30 days (the number of days can be changed of course):

ForFiles /p "C:\path\to\folder" /s /d -30 /c "cmd /c del /q @file"

Hope this helps.  

[#4]

Hi @bhushangawale,

thank you for your reply. FSLogix app masking looks good. We will test it out.

Thanks again

Seb

[#5]

Hi @patrickkoehler ,

thank you for your reply. I am haven't heard yet from Ephemeral OS disks. It is definitely worth to test it for our requirements. Thank you also for the PowerShell statement.

Best regards
Seb

[#6]

Hey! I am looking for a solution to the same problem. We’re you able to address it with FSLogix?

[#7]

As alluded to by a few other people, multiple ways to resolve this, you could exclude folders, such as the 'Downloads' folder from the fslogix profiles to avoid bloat, and configure Storage Sense, to automatically remove the files in the Downloads folder after a specific day/time, and then configure GPO for the browsers to make sure that any Downloads do go into the Downloads folder by default (its usually their default behaviour):

https://luke.geek.nz/azure/Azure-Virtual-Desktop-Optimisations/#implement-storage-sense
https://www.laptopmag.com/articles/change-downloads-folder-edge-browser
https://admx.help/?Category=Chrome&Policy=Google.Policies.Chrome::DownloadDirectory

[#8]

Thank you!