We're thinking about using virtual desktops to provide more granular control over user accounts and restrict file access to these virtual machines - how would we also go about meeting requirements for the VPN control? Could we have employees run a VPN from their host machines prior to connecting the VM?

Honestly, is this even a good approach to compliance with most of the data stored on a sharepoint? Would it be easier to switch the license to GCC high and configure it rather than move to this system?

​