Prevent unwanted software from running on session hosts. You can enable App Locker for additional security on session hosts, ensuring that only the apps you allow can run on the host. https://docs.microsoft.com/en-us/azure/virtual-desktop/security-guide#other-security-tips-for-session-hosts