Hello @Phil Omalley,
With Azure Virtual Desktop (AVD), your team can securely access a Windows desktop from any device even their personal laptops. This means consultants can use tools like Office 365 without storing or handling sensitive data directly on their own devices.
You can also set rules to prevent people from downloading, printing, or copying data from the virtual desktop to their local device. This helps keep sensitive information safe and supports your compliance with security policies.
On top of that, you can use Azure Active Directory to add extra layers of protection like requiring multi-factor authentication or allowing access only from trusted locations or approved devices.
https://learn.microsoft.com/en-us/azure/virtual-desktop/overview
You can also access from the browser. Please follow this link for AVD deployment- https://learn.microsoft.com/en-us/azure/virtual-desktop/deploy-azure-virtual-desktop?tabs=portal-session-host-configuration%2Cportal-standard%2Cportal&pivots=host-pool-standard
If you have any further queries, do let us know.