I set up a new GPO to limit C: drive access.
User Configuration\Polices\Administrative Templates\Windows Components\File Explorer
Hide these specified drives in My Computer: Enabled, C
Prevent access to drives from My Computer: Enabled, C
Works as expected, but if help desk needs to go to the C: drive for whatever reason, how can they do that? Is there a way without doing a switch user? I tried running Explorer as Administrator, but no dice.