There are some simple rules to follow if you want to prevent your users from browsing the file system of your Remote Access server:
1- Make sure you do not give your users administrators rights. Proper user/group rights management is key to limiting access to sensitive data.
2- Open an AdminTool and click on the "Applications" tile.
Click on the "Assign Application" tab:
Select a user from the list on the left and check the "TSplus Floating Panel" application.
In this example, the next time the demo user "TEST01" opens a session he will see the TSplus Floating Panel as well as any applications assigned to him, but no Remote Desktop.
Here is the result : only the Floating Panel and the assigned application (in this case, the Notepad) are visible for the user "TEST01".