Employee system remote monitoring and file changes logging in a non AD private network with a server

Hi

I am getting a network built without AD. There are very few PC's in system to I can manually setup in not a long time and all id's and password are under my control. I have a server only becuase we needed a raid 5 storage (we bought used and cheap. an r720)

I would like to know how can i view my employees screen realtime from my own pc on the network? We will not have internet on this network for some computers.

Also by what means can i track when which user made changes to what files and save an log for this? If by means of an installed software. How can i prevent users from closing this software? Or hide it?

All users except working on cad softwares are in srandard accounts. Cad guys need admin for solidworks to work correctly. Anyway to make it work correctly on standard? I once used a command in shortcuts path to make it run as admin without asking password under a standard account. But i am not sure if it will apply to other components of solidworks