An approach for accessing one or more resources at a virtualized desktop infrastructure (VDI) client running on a client device by a remote virtual machine (VM) is provided. The method includes intercepting, via a VDI agent, a request to access one or more resources at the client device, transferring the request from the remote VM to the client device via a network redirector protocol, and filtering the request to determine if the request complies with one or more rules. For a first resource of the one or more resources, if the request does not comply with any one of one or more first rules of the one or more rules, access to the first resource is denied. If the request complies with the one or more first rules, access to the first resource is granted and a response is sent to the VDI agent via the network redirector protocol.