The virtual desktop is a sandbox environment in which users can run programs and surf the ‘net without fear those activities will damage the host computer.
Applications in the virtual desktop are isolated from other processes on the host computer, write to a virtual file system, and cannot access user data. Changes made to files and settings in the virtual desktop do not affect the originals on the host system.
Because of this, any attacks by internet-based malware cannot reach or compromise the host system. This makes the virtual desktop a highly secure environment for general workflows, and specifically for surfing the internet.
By default, the virtual desktop only has a shortcut for your default browser. This article explains how to use CCS to add shortcuts to other browsers.
Note – You must also enable 'Allow user to override Virtual Desktop settings' in the Endpoint Manager profile. If not, then any changes you make in CCS will be reversed at the next sync with Endpoint Manager. See this article for help with this.

Run a browser in the virtual desktop

Login to the endpoint and open CCS
Click 'Tasks' > 'Containment Tasks'
Click the 'Run Virtual desktop' tile:

The virtual desktop opens at the session selection screen:

Click 'Start Virtual Desktop Session'

You might have to accept a disclaimer if your admin has set one:

You will see a PIN number if session protection is enabled:

If you pause the virtual desktop, you will need to enter this number to resume the session. You can view the number at any time by clicking at the bottom-right of the virtual desktop.