Tutorial: Setting up a Windows 8.1 Pro PC as a Thin Client

[Kaido]

Windows 8.1 Pro has a cool featured called "Assigned Access" which basically puts the computer into Kiosk mode with no special lockdown settings required. This is useful in a variety of settings, such as limiting what apps employees or kids or the public has access to. I've found it handy for using a computer as a thin client using the RDP app. The two catches are that (1) you must be running a Pro (or Enterprise) version of Windows 8.1, and (2) you can only run Modern Apps (aka Metro apps). Fortunately, Microsoft has a Modern App version of Remote Desktop available. This works awesome for remoting into say a Terminal Server. I don't really care for the typical Wyse-style thin clients (from experience), so this is another nice alternative.

The procedure in a nutshell:

1. Install Windows 8.1 Pro
2. Create an admin user & a local user
3. Setup RDP under the local user account
4. Setup Assigned Access
5. Tweak login & power settings:

1. Install Windows 8.1 Pro:

Assigned Access mode doesn't work in the basic versions of Windows 8.1. If you have a computer that came with say Windows 8.1 with Bing, you can upgrade it to Pro using the Pro Pak for $95: (instant key delivery on Amazon)

http://www.amazon.com/Microsoft-Windows-Pack-Upgrade-Online/dp/B00HG0460M/

On the Android devices I setup as locked-down thin clients (such as the HP Slate 21 Pro), I typically use SureLock. They have a version for Windows, but it's $99 per license, so you might as well upgrade to the better version of Windows ($5 cheaper!), which also lets you join a domain & have Windows Media Center. Here's a link to SureLock for reference:

http://www.42gears.com/surelock/windows8purchase.html

Bottom line: you need an industrial version of Windows 8.1 to use this feature, not a consumer version. Side note: I've read that Windows 8.1 Embedded lets you lock down desktop apps, although that OS is not readily accessible

2. Create an admin user & a local user

You don't need an online Microsoft Account to setup a Pro computer; you can create local accounts instead . I create a password-protected local admin account, and then a non-password-protected local account for Assigned Access. You can use "admin" & "kiosk" or whatever usernames you want.

3. Setup RDP under the local user account

For starters, you can't run desktop programs in Assigned Access; they must be "Modern apps" (for Metro). Thankfully, Microsoft has an updated version for Metro available for free in the Windows Store. Here's a link, but just search for "remote app" in the Windows store on your 8.1 Pro computer:

http://apps.microsoft.com/windows/en-us/app/remote-desktop/051f560e-5e9b-4dad-8b2e-fa5e0b05a480

Because Windows Store apps are not shared across accounts, you will need to install the Modern app on the local account (not admin account) you want to setup for Assigned Access. You will need an online Microsoft Account in order to do this, which will want you to switch to that Microsoft Account locally as the user account & also want you to enter a payment method. The workarounds are:

1. Launch the Windows Store, go to Account at the top, and sign in from there. Then download the app. If you try to download the app without signing in globally, it will prompt for a payment method (despite being a free app) & won't let you past that screen.

2. You do not have to switch the local account to a Microsoft Account locally; there is a link to allow access for just the particular app that you're downloading from your Microsoft Account ("Sign into each app separately instead"). So you'll still have to sign in to download (which you can do without entering a payment method), but you can keep your local account:

http://img10.imageshack.us/img10/2355/v6p4.png

4. Setup Assigned Access:

Procedure here: (screenshots)

http://blogs.technet.com/b/askpfepl...ssigned-access-in-windows-8-1-kiosk-mode.aspx

Basically go to PC Settings (gear icon in Metro) > Accounts > Other Accounts> Set up an account for assigned access, then select the local account you want & select the RDP app. Super easy.

5. Tweak login & power settings:

Next, you'll want to enable automatic login to make things easier by doing 3 things:

1. Disable login screen
2. Disable sleep login screen
3. Adjust power settings

From the admin account, start out by disabling the login screen:

1. Press the Windows button & R to launch the Run dialog
2. Type in "control userpasswords2" & hit OK
3. Uncheck the "Users must enter a user name and password to use this computer" box & click apply
4. Enter the local user name (should pop up default) & password (I left it blank) & click OK

This removes the lockscreen & login prompt at boot. Next, do the same thing for the lock screen (the wallpaper screen you see when it wakes from sleep); this will allow you to tap the keyboard & have it come right back to the desktop:

1. Press the Windows button & R to launch the Run dialog
2. Type in " gpedit.msc" & hit OK
3. Navigate to Computer Configuration -> Administrative Tools -> Control Panel -> Personalization
4. Double-click on "Do not display the lock screen, set to "Enabled", and click OK

Finally, go into the power settings and disable computer sleep, but enable display sleep (set however many minutes you want). This way the unit stays on all the time, but lets the monitor go to sleep. You can adjust PC & display sleep per your own requirements. Finally, reboot & make sure everything works!

On my test station, I powered up, it went through BIOS, then flashed the orange RDP app screen for a second & loaded the RDP app. You can log back into admin mode by tapping the Windows key five times (requires your admin password to login for security). As far as computers go, there are a bunch of neat machines coming out based on Intel's low-power quad-core Z3735F chip. I am currently testing a $180 MINIX NEO Z64 (requires the $95 Pro Pack, which makes the total $275 for the PC with power supply - BYO KVM), which has a load wattage of a little under 9 watts & an idle of just under 5 watts:

http://www.amazon.com/Windows-installed-Quad-Core-Streaming-Player/dp/B00TD8MTFY/

So you basically get a computer that boots straight into a native Windows RDP app for $275. Awesome!

 

[Muadib]

My mom wouldn't want a thin client, so I gotta ask why? Ps if it's work related, just use Citrix.

 

[Dahak]

My mom wouldn't want a thin client, so I gotta ask why?

If you want to lock down the machine to run sorta like a internet kiosk or if you have a custom program or app that you only want that to run.

Think of it more as a single use machine mode

 

[Chiefcrowe]

Thank you, this could be very useful. I will test this out if we end up needing another kiosk.

 

[Kaido]

My mom wouldn't want a thin client, so I gotta ask why? Ps if it's work related, just use Citrix.

Maybe I missed part of this conversation: why would your mom want a thin client? Do you run a Terminal Server at your house or something?

Also, Citrix is fine, if that's your infrastructure. HDX is pretty dang decent these days. But I primarily work on Windows TS, so RDP or bust for me :thumbsup:

 

[Kaido]

Thank you, this could be very useful. I will test this out if we end up needing another kiosk.

You're welcome! I was really happy to discover this! On the $275 MINIX box I'm testing it on, it's basically about 15 seconds from a cold boot to booting straight into the app. I use a lot of different Android devices as faux thin clients; the catch is that the resolution is fixed from the MS RDP Android app (like on the HP Slate 21, it's kind of a quasi-720p-ish that can get a bit fuzzy-fonty), so if a user wants to change their settings to say improve readability on a small-font HD screen they're stuck on the Android version, whereas with a PC-based unit, there's a lot more flexibility. Also, on a good network, the RDP performance is WAY faster on a native Windows machine. Minimal perceptible lag, unlike the Android version which can be a bit slow & have some graphical artifacts.

It's interesting how before, a computer was kind of a universal device, and now it's gotten extremely niche. For example, I primarily deploy NUC computers now (specifically the Gigabyte BRIX variants), with between one to three monitors for either basic office use or light CAD usage (one unit has a 2gb GTX760, which is pretty decent for some of the lighter DCC packages). The only time I really build stuff from scratch is for stuff like custom engineering or video editing workstations, or machine tools that have special add-in card requirements. And now with stuff like the MINIX & other quad-core Atom designs, you can setup a basic computer for very cheap, whether it's on an older DVI monitor, a flat-screen television, or a new HDMI screen. Or throw it up as an HTPC with a projector & a Logitech K400 wireless keyboard with built-in trackpad. So many cool options without having to break the bank, or have a 300-watt doorstop running up your electricity bill all the time.

 

[Kaido]

If you want to lock down the machine to run sorta like a internet kiosk or if you have a custom program or app that you only want that to run.

Think of it more as a single use machine mode

I've been working with digital signage & displays for the last year & a half or so; the NUC line has been extremely beneficial for that. I think the MINIX running a Modern App would be even better, because it's under 10 watts on load, doesn't get hot, and is small & cheap. The problem is that it's limited to Modern Apps through the Assigned Access feature, which limits what you can choose, but if you do need more functionality, stuff like SureLock Kiosk works great. It's so nice to have hardware & software options available like these for easy setup that gets you the results you want :thumbsup:

 

[takeru]

intel stick

http://www.engadget.com/2015/01/07/intel-compute-stick/

 

[RossMAN]

Kaido for Elite!

 

[splat_ed]

I'm bookmarking this as I work as a teacher in a school with limited budget... We want some more PCs in our Chem lab with just certain software accessible...

 

[Kaido]

intel stick

http://www.engadget.com/2015/01/07/intel-compute-stick/

I have the Lemel version on order already:

http://www.newegg.com/Product/Product.aspx?Item=9SIA2NR2GP6238

The primary downsides are:

1. No built-in Ethernet
2. Only one USB port
3. Runs off USB power
4. No separate Wifi antenna

I like the MINIX because it uses the same guts, but the heat distribution is spread out over a large surface area (barely gets warm at max load) & because it's kind of a set-top design. My experience with sticks is that they can get messy...unless your monitor has powered USB ports (or you have a TV with them), you'll have to run the USB cord out to an A/C adapter, you'll be stuck with Wifi unless you get a USB to Ethernet adapter, you'll need to either get a Bluetooth keyboard & mouse or else get like a Unity receiver from Logitech so you're only using up one USB port, or else you'll have to get a USB splitter if you want to plug in some extras like a printer or barcode reader. So it gets a little tricky once they get that small because it lacks ports & all of the wiring goes outside of the unit if you want to do anything other than the very basics with it. I have an Android HDMI stick & it has the same set of issues - great idea in theory but gets a bit messy & is more limited in practice.

There are a lot of interesting options available right now though. The VOYO Mini PC is essentially the same beast, but it's got a 64gb eMMC card, three USB ports, and sells for $50 cheaper than the MINIX does at the moment, although there's no Ethernet port, so you'd have to use a USB port if you want to add that. This is essentially the first generation with this chipset style though, so we'll only see it grow in the future. Plus, if you need something a little beefier, the HP Stream Mini is also $179 & allows for crazy expansion, without having to pay NUC prices at the get-go.

 

[Kaido]

I'm bookmarking this as I work as a teacher in a school with limited budget... We want some more PCs in our Chem lab with just certain software accessible...

If those apps aren't Modern Apps (for Metro), then you can use SureLock:

http://www.newegg.com/Product/Product.aspx?Item=9SIA2NR2GP6238

It basically locks everything out & only puts the icons you want on the desktop, and works with legacy apps. It sure beats locking Windows down manually! So depending on what you need:

$180 for a MINIX PC
$100 for the 8.1 Pro upgrade (if your school requires it to be on a domain)
$50 for a Surelock license

You can get a decent 1080p LED monitor with built-in speakers for around $150 for a 21" or 23" size, which takes care of the picture & sound via single (included) HDMI cable. My pick for keyboard & mouse is the Logitech MK320 set, which is $30 & uses a single USB receiver. The keyboard & mouse are excellent; I prefer them over the more expensive Logitech models because they're both cheap & work better:

http://www.newegg.com/Product/Product.aspx?Item=N82E16823126188

Since I put computers into various shop environments, I stick a keyboard cover on the keyboard when it's going to be in a dirty place. It makes them a bit more gummy to type on, but for a school environment (especially a chem lab), it may be worth the $15 for you:

http://www.newegg.com/Product/Product.aspx?Item=9SIA3AN1196932

Although it depends on if you're comfortable having wireless equipment in the room around students. When I was in school, kids used to steal the mouse balls off the wired mice, so maybe a wired keyboard & mouse are better options

 

[e-gaulue]

Just a question regarding Windows Pro upgrade.

Do you need your thin client to be on Windows Pro licence if you just want to use RDP client to connect to a Terminal Server belonging to a domain?

According to me, a Windows Family distribution is able to connect to any Terminal Server as long as you provide the right credentials (including the domain name). But, I don't use a such modern Windows distribution as 8.1. So I'd like to have a confirmation.

Morevover, is it easy to clone a Pipo X7? Maybe not as easy as a Raspberry Pi but how would you do it? Any tricks?

Regards,