In situations involving compromised user accounts simply disabling an account is often not sufficient to mitigate the threat especially if the account is actively being using to send SPAM/Phishing email or to download data.
As part of working within Horizon environments alongside with AppVolumes and FSLogix there are some lessons that I have learned working with these technologies. This blog post is intended to provide some general settings for making these technologies work in tandem and to improve the user experience.