How can I lockout users access to C:\ within IE8 remoteapp

So heres a brief description of the issue Im having,

Created a remoteapp for IE8, locked down the RDS server so that all drives are hidden. Users are still able to C:\ using the browser to gain access to the C drive... Is there a way to lock this down to only use http or https entries

Thanks in advance!