I need an auditor to be able to access the server's file system and be able to run programs on their local computer without the ability to save/copy the data.
At the moment, the best solution we have found is remoteApp:
- Create a remote rdp from windows explorer (Explorer.exe)
- Disable clipboard
- Enable drivestoredirect so that the auditor can access and run their programs from the remote browser session
At the moment it is a semi-working solution, however since drivestoredirect is enabled you can still from the applications save the files to your local system.
The solution might be to set the local disks as read-only, so that you could access your programs but not save anything on them, however, I have not found this option.