Even after restricting client drive mapping in HDX sessions user can save files on their client through redirected client printer such as 'Microsoft Print to PDF' etc. There are hundreds of such printers which cannot be blacklisted through policy as we do not have the list.

 

1. Use the "Printer driver mapping and compatibility" policy to block all client printers to redirect to the HDX sessions and whitelist only known printer drivers.

For example


2. Use the "Universal Print Driver Usage" policy to block above denied printer to redirect to the HDX sessions by UPD driver.

3. Restart VDA and the policy will take effect.