>From a "permission threat" it makes no difference at all if you run from a share on server or local install.
>As soon as there is a process ID on client, it could spell trouble.
>Running the exe from share might marginally offer better tracking with less effort - perhaps Al can offer opinion.

Agreed, if an EXE runs on a client computer it must be granted enough permissions to run. Depending what it needs that could pose a threat. That's mostly true whether the user has a "standard" or "administrator" local account, but a standard account probably offers a little better protection against certain types of threats.

If the customer is paranoid about security they should be running the app on an RDS server. For the users that's more tolerant of transient network faults, less chance of losing work, especially if they can reconnect to a disconnected session. If network bandwidth is a bottleneck the app may perform better on an RDS server and the vast majority of potential network issues just go away.