PC use in large hotel -- what security protection is needed?

I would recommend the combination of a VPN and Timbuktu. Timbuktu runs encrypted over SSH (optional setting) and gives you a very robust & responsive remote control of computers that are actually in your company’s office, behind their firewall. You can run 2, 3, 4, or more computers simultaneously in different windows.
The VPN connection requirement situates their Timbuktu-enabled workstation(s) completely behind their firewall — not that Timbuktu is a very high security risk, but it means those computers need not be “findable” to the outside world.

The Timbuktu modality means that if the hotel network goes down while something was being compiled or otherwise in a delicate momentary situation, the computer that is actually doing that work is safe in your corporate environment, the process uninterrupted even though you’ve lost your window to it for the moment.

Timbuktu also means you don’t get a performance hit over the WAN connection. You can run intensive operations even if you are on a dial-up connection from Mozambique. Only the mouse actions and keyboard keystrokes on your end, and the screen from the other end, need to go over the internet.

TB2 is cross-platform and is significantly more robust than freeware apps (e.g., VNC) or web-based remote control (e.g., gotomypc.com / logmein.com) and has a solid file transfer capability built in. If this were something an individual user was asking about, I’d say VNC but for a company I think shelling out for TB2 is the way to go.

Which passwords are you talking about? Gmail, yahoo mail, hotmail all have the option to send the passwords via https which is encrypted. Most banks websites are encrypted. Most store sites are encrypted when you actually make purchases. Other things like boards.straightdope.com are not.