Access denied to C:

I created a security policy on a user's profile to hide the Local disk C:\.
It seems to be working but if this user creates a shotcut to C:\, the access
to different folders in this drive becomes possible. How can prevent the
user from creating a shortcut to C:\ in his folder bearing in mind that he
must be allowed to create folders for the purposes of his day-to-day works ?

Thanks