If you don't want them to access any of their local drives from within the Terminal Services session, then disable drive mapping (it's disabled by default). If you'd prefer to be selective about it (that is, they can't get to C: but can get to their CD drives) then this won't work, since Win2K3 drive mapping is an all-or-nothing proposition.
Dig Deeper on Legacy operating systems
Related Q&A from Christa Anderson
Expert Christa Anderson advises how to map images on a network share for user on a terminal server. Continue Reading
Expert Christa Anderson offers some ideas for monitoring who is connecting to a terminal server, and when they are connecting. Continue Reading
Expert Christa Anderson suggests some third-party software producst that can help in using a scanner with Terminal Services. Continue Reading