I have a Windows 2008 r2 server that is being access over RDP. I don't want that user to be able to see or browse to any shares on my domain. They can have access to the Internet.
They are already in a deny list, but I don't want them browsing anywhere either. Is their a Group Policy that can do this?