XenDesktop Receiver Embedded Client (Full-Screen-Only)

I had an opportunity last Friday to experiment with the Desktop Receiver Embedded Client for XenDesktop. After my past experiences with Thin Clients, I knew the embedded client would make a lot of sense for both administration and ease of use. The install package is fairly small (11MB) and the functionality is almost seamless.

After logging into a standard MS Windows GINA, the user will be redirected to a full screen only edition of their XenDesktop. By enabling write filters on the thin clients and also having VMs reboot after a XenDesktop user log off, laborious desktop management becomes almost non-existent. The user experience takes place in an almost completely read-only environment that moves with them wherever they go.

According to the Desktop Receiver Admin Guide, the embedded client replaces the shell for each Windows user except for the user account that installs the software. Therefore, any future windows user that logs in and is successfully authenticated will also automatically be given a full-screen-only desktop. Admin accounts, such as members of Domain Admins, are not excluded from a full-screen-only desktop. Any changes that need to be made to the client device will require the account that was used to install the embedded software.

It seems that the software presents the full-screen-only desktop by modifying the "Shell" registry key in: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon from "explorer.exe" to "pnagent.exe".

Citrix also mentions that if the account used to install DesktopApplianceLock_en.msi is later deleted, you will not be able to log on and administer the endpoint device.