How to restrict access to network folders on the terminal?

Question

RDP

Day, good colleagues.
There was a question of protection of a terminal server: to each user spheres necessary for it are connected by group policy. At the same time, some users go to the terminal from the outside for work issues. The terminal is dedicated, does not store anything itself and simply provides access to network resources on demand. And to the balls too, and also with the right to write and change.
So here's how to limit the write permission only from the terminal, leaving only view permissions?