Wyse Thin Clients C90LEW with XenDesktop 7.5 & StoreFront 2.0

Wyse Thin Clients C90LEW with XenDesktop 7.5 & StoreFront 2.0

I am trying to figure out the best way to configure something I have inherited. I have an environment which has the following setup:

Wyse C90LEW thin client

Wyse Version: 8.02 (Build 0718.2048)

Windows WES Version 5.01 Service Pack 3

Software loaded: Citrix Desktop Lock 14.1.0.0 / Citrix Receiver 13.0.0.6685

These devices were connected to the previous CSG/WI w/ XenApp 6.5 installed launching full desktops. Citrix Desktop Lock was installed and the PNA server registry key was pointed to the CSG/WI IP. The users would login to the thin clients which were added to the domain. This would pass the users creds to the CSG/WI and the user would automatically launch a full screen desktop (Windows 2008R2.) The only issue I have seen with this is when the user logs out in the TS session it doesn’t log them out of the thin client. It instead leads them to a blank screen where they can hit Ctrl + Alt + Del and log off or just power cycle the unit (which happens frequently.)

I have implemented a new XenDesktop 7.5 setup with 2 x Windows 2008R2 RDS launching Full Desktop. This also includes StoreFront 2.0 (I have enabled legacy PNA support) and NetScaler 10.1 (for WAN access) I am trying to figure the best way to configure these thin clients. Setting the PNA agent to the new server IP doesn’t do anything. It says launching desktop then logs back off.

I have been told IE Kiosk mode seems to be the best method, which seems to work alright with some initial testing. I need to disable things like task manager and such to lock the desktop down. Should I add these machines to the domain? If so then I create a domain user and set the auto-logon reg keys with this user on all of the thin clients? My thinking was domain to be apply to apply GPO to these thin clients to lock down its settings. I have heard others say no domain, but then what is the best way to lock down the device? Local Policy and turn on the write filter once completed?

Can I update Receiver Enterprise on these? I tried installing the latest Receiver Enterprise from the XenDesktop 7.5 ISO but exe’s don’t seem to run on the OS for some reason even if logged in as administrator. Please tell me if I am off on any of my thoughts! Thanks in advance.