On desktop you could have NO VM and one AC. Then change paths each time. If you set up the change path right (my way, lol), it's pretty fast. Besides the red message, the other doctor and staff are going to notice their patients aren't there. I am sure you could get some HIPAA note that covered the other staff if they go in by mistake.
Sandeep, would one of the log files record who went into what AC?
Yes, you can enable auditing on the folder to track who accesses it. Or you could restrict access using permissions. Again, I'm not sure of the extent of separation and the desired mobility. Scenario 2 is almost completely isolated. He could pack up and leave without interrupting anything.
.png "ACUF Donor I")
