One example disclosed method involves a computing system providing a client device a virtualized computing environment. Upon receiving a request to access a file or folder in the virtualized computing environment from the client device, a file system filter driver of the computing system may intercept the request, and determine authorization to access the file or folder based at least in part on a security policy associated with the user account. If the client device is authorized to access the file or folder, the computing system may cause the client device to output a representation of contents of the first file or folder using the virtualized computing environment.