mapping an NT drive to a remote pc

I am setting up an NT server with some CD-ROM based training applications. I want my clients to be able to remotely connect to the server to run only these apps (they will essentially be mounting a remote drive on the server.

However, I want tomake sure they can only run certain executables, and not transfer the CDROM files to their machines.

Is remote control software the answer (as in PCAnywhere or NetOP), or is there some simpler means? I have to control user security and accessas well.

My clients and I are all on a WAN (there is no dialup networking provision, so RAS is not going to be used)