If you had Exchange you could do Active Directory Rights Management Services (AD RMS).
You say that getting Exchange is unlikely. I wish I had a more robust answer for you.
All of my written content here on TR does not represent or reflect the views of my employer or any reasonable human being. All content and actions are my own.