We do the filesystem side of the same problem. Instead of giving the agent a folder, map it to a real drive letter on Windows. The agent only sees its own drive, can't touch the rest. subst.scsoi.com for local, drive.scsoi.com for WebDAV. Pairs well with a screen tool like this.