If you had Exchange you could do Active Directory Rights Management Services (AD RMS).
You say that getting Exchange is unlikely. I wish I had a more robust answer for you.
"Welcome back my friends to the show that never ends. We're so glad you could attend. Come inside! Come inside!"