Install the AppTunnel server on one of your Windows servers or VMs. This is your control plane.
Single executable tray app. Users authenticate and see their allowed applications.
One click launches the app. Tray client handles installation, registration, and creates a persistent encrypted tunnel to your database.