One VMware per app would be the easiest way to fix this. Just put the whole mess in a box and forget about it.

If MS is worried about people using this for servers, it's easy to add limitations at a higher level.