The main software application has a server client relationship. There are two instances of client software which have different levels of privileges.
We have two workstations usr 1 and usr 2 that need access to the two different instances client 1 and client 2 (These clients would run on their own windows version. However when the instance "client 1" is in use by "usr1" then "usr2" must be blocked from signing into "Client 1". "Usr 2" would typically log into "Client 2". However usr 1 and 2 must be able to swap but only when the client is free.
If Usr 1 signs out from "Client 1" he must be blocked from signing into "Client 2" if its in use.
In my experience the RDP approach allows "usr2" to log into a machine being used by usr1 which would effectively log off "usr1" without "usr1" having any opportunity to stop "usr2".
On this basis I believe the VM Console would be a better choice from what I've read in the link below. It would be able to be configured so that any usr once logged onto a client via the virtual machine would have exclusive access. The applications we have controlling RF transmitters must be secure and usrers cannot be logged off without approval.
https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.vm_admin.doc/GUID-89E7E8F0-DB2B-437F-8F70-BA34C505053F.html