An arrangement provides a work environment to a remote user who is logged-in as a member of an enterprise, which work environment includes both a telecommunication capability and a data processing capability, and both are concurrently associated with the logged-in user. The data processing capability is restricted to the user obtaining only views of files, rather than the files themselves, and all file processing that can potentially store data is restricted to applications that can store files only in a range of locations specified by the enterprise.