Secure remote RDP worker prevent file transfer

You can block port 3389 and/or go into group policy editor choose computer configuration then administrative templates, windows components, terminal services, then client-server data redirection and set 'do not allow drive redirection' to enabled.