The server component does not necessarily need to reside on a logon server or DC. A member server would be sufficient.

However, you would need access to the login script in order to add the client component.

Security is relatively easy to implement in the server script by adding validation logic to the install requests, e.g. cross-checking computer names, user names, and IP addresses, to ensure that only authorized computers/users receive the requested application.
_________________________
There are two types of vessels, submarines and targets.