Virtualization of PCs

I am very interested in virtualization – I work as IS admin for a cardiology group. We are working with the local hospital to have access to their systems for billing, etc. However, the hospital wants to keep their system separate and locked down from ours. In doing this they are setting up an additional PC at the user workstation where one PC for our network already exists and utilizing KVM switches, and a separate total network connection directly into their network. Can’t we solve this with virtual PCs on the users already existing workstations? Can’t we lock down the Virtual PC and the network connection? Please advise Thanks!!!