In-Depth

The Thin-Client Landscape, Part 2

In Part 1 of this article, I examined the consolidation of the thin-client market and the major hardware and software vendors in it. This included giants such as Dell, HP, and Lenovo. I found that while these manufacturers continue to sell devices, they often treat the operating system as a commodity, frequently relying on third-party solutions such as IGEL or 10ZiG to provide the operating system and its management layer. Thin-client vendors are pivoting toward software-defined endpoints; in fact, IGEL has stopped selling hardware altogether, while 10ZiG occupies a unique "bridge" position, simultaneously maintaining its own hardware line while offering its own operating system for installation on x86 systems.

In this article, I will provide a checklist to help you define your endpoint strategy and, to give a complete picture of the landscape, I will also examine zero clients and explain how these devices differ from standard thin clients.

Hopefully, by the end of these articles, I will have provided you with guidance on selecting the right endpoint strategy for your organization, whether it involves repurposing old PCs with software or investing in dedicated thin client devices.

Thin Client Buying Checklist
While the hardware for thin clients has largely been standardized on x86 architecture, the software varies among vendors, each with different capabilities, market niches, and costs. Since end users' first experience with remote desktops and applications is through a thin client, the thin client must provide an excellent user experience. Additionally, it should be as user-friendly and supportive for IT teams as possible.

Below is a checklist of considerations for selecting a thin client.

1. Define Your Use Cases
Identify what types of users you're supporting: task workers, knowledge workers, power users, or specialized roles (healthcare, finance, manufacturing). This determines required CPU capability, RAM, number of monitors, USB support, protocols, and any other special needs your users or applications have.

2. Confirm Protocol Compatibility
Ensure the device supports the remote-display technologies you rely on. For most environments, this means Citrix Workspace/ICA, VMware Blast/PCoIP, and Microsoft RDP/AVD/Windows 365. Look for hardware acceleration for these protocols if you have multimedia or multi-monitor requirements.

3. Evaluate Management Platform Quality
Modern thin client success is driven by centralized management. Compare vendors' management consoles for features such as mass patching, profile-based configuration, remote control, granular security policies, and cloud management. The cost of the management can be a significant line item, so do not forget to include it when considering a solution.

4. Check Security Features
Look for secure boot, firmware locking, write-protected OS images, and strong authentication integration (smart cards, FIDO2, MFA). Your policies may require zero endpoints, making them more difficult to tamper with.

5. Assess Longevity & Support
Thin clients often stay in service 5-8 years. Review vendor firmware update policies, OS lifecycle, warranty options, and whether they offer advanced replacement or on-site service. Check the vendor's history of supporting older hardware.

6. Consider Peripheral & Workspace Requirements
Evaluate USB redirection for webcams, headsets, signature pads, printers, and specialty devices. Confirm monitor support (resolution, number of displays) and whether the device can handle 4K or high-refresh desktops if needed.

7. Look at Deployment & Imaging Options
Some vendors provide streamlined onboarding, cloud-based provisioning, or profile cloning. This can significantly reduce rollout time, especially for large environments. If you are repurposing devices, try to do so remotely.

8. Management Costs
Hardware and operating system costs alone are misleading, as devices with superior manageability often have a lower total cost of ownership. Factor in hardware, licensing (OS and management console), support, energy use, and the frequency with which the device needs local support.

9. Validate Vendor Stability & Ecosystem Fit
Ensure the vendor is committed to thin clients and maintains strong partnerships with Citrix, Microsoft, and VMware. Consider whether their hardware, OS, and management tools align well with your existing VDI/DaaS platforms.

10. Request a Pilot Program
Before large-scale purchase, test a handful of units with your real workflows, peripherals, and network conditions. This reveals protocol quirks, management gaps, and performance issues that specs alone won't show.

11. Support
Make sure your vendor has a service-level agreement (SLA) that meets your needs. This includes hours of operation, country of support (some governments require this), and their relationship with their hardware or software partners.

[Click on image for larger view.]

Example Buyer Checklist
Below is an example of the requirements for one company's thin-client needs. This, when combined with the checklist above, gave the customer a framework for evaluating the various thin-client vendors.

  • A secure and reliable thin client operating system with a proven record of success

  • Support for Horizon VDI (Blast)

  • Ability to run SaaS applications using a secure browser locally

  • Reusability for future DaaS (AVD) program

  • Be able to convert Windows 10 PC's remotely using Intune

  • Access to hardware and software for evaluation before final commitment

  • Easy connection to remote assets

  • An intuitive and easy-to-use management console

  • Boot and run off a USB stick if needed

  • Flat, simple, transparent pricing model

  • Preference for a single vendor to provide and support the operating system and the hardware

  • Reasonable cost for the OS and its management

Using the checklist and requirements, they narrowed the list of vendors that met their requirements.

[Click on image for larger view.]

Zero Clients vs. Thin Clients
I would be remiss if I didn't delve into Zero Clients, how they differ from thin clients, and the major vendors in this space.

A zero client is the simplest and most secure endpoint device in a VDI or DaaS environment. Unlike a standard PC or even a thin client, a zero client possesses no local operating system, no hard drive, no local storage, and no independent processing capability for applications. It functions essentially as a dedicated endpoint, utilizing specialized firmware to perform a single task: receiving encrypted screen pixels from the data center, decoding them, and displaying them on the monitor. Because it lacks a "brain" of its own, the device transmits user input, such as mouse movements and keystrokes, back to the server for processing; consequently, if disconnected from the network, a zero client becomes functionally useless.

The fundamental difference between a thin client and a zero client lies in their architecture and management requirements. While a thin client runs a lightweight operating system such as Linux or Windows IoT on local flash storage, allowing it to support multiple connection protocols and peripheral drivers, a zero client is typically purpose-built for a single protocol, such as PCoIP or Citrix HDX. This specialization makes the zero client significantly more secure, as it lacks a local operating system that could be vulnerable to malware or data theft. From a management perspective, this creates a "set and forget" experience where administrators rarely need to touch the device. In contrast, thin clients still require routine patching and updates for their local OS and browsers. Furthermore, because zero clients often use dedicated hardware decoding, they frequently offer superior performance for high-fidelity graphics compared to thin clients, which rely on general-purpose CPUs.

[Click on image for larger view.]

The market for zero clients is somewhat niche and dominated by vendors specializing in high-security and high-performance environments. HP became a central player in this space following its acquisition of Teradici, the creator of the PCoIP protocol, allowing it to license "Trusted Zero Client" technology to other manufacturers while selling its own devices. 10ZiG stands out by offering a unique hybrid approach with their "NOS" platform, which effectively turns hardware into a zero client by locking a tiny Linux kernel to a single connection broker, offering the speed of a zero client with slightly more hardware flexibility.

For mission-critical sectors such as defense and finance, companies like ClearCube and Amulet Hotkey provide ruggedized, high-security hardware capable of handling complex multi-monitor setups and supporting sensitive data isolation. Meanwhile, consumer giants like LG and Samsung focus on clean-desk environments by integrating the zero-client chip directly into the monitor bezel, creating an all-in-one solution. Finally, Dell remains a significant player through its Wyse product line, which includes widely deployed PCoIP models. However, it has recently shifted focus toward thin clients that emulate the zero-client experience through software.

Which Thin Client Should You Use
Below is a summary of the pros and cons of the major independent thin client providers.

IGEL OS 12

IGEL is a player in the software-defined endpoint market, treating hardware strictly as a commodity. Its strategy involves completely wiping the device's existing operating system and replacing it with its Linux-based thin client OS.

The devices are managed by the sophisticated Universal Management Suite (UMS), a powerful and complex management platform. With over 7,000 granular policy settings, it appeals to enterprises but may prove overwhelming for smaller organizations. IGEL supports major unified communications (UC) applications, including Microsoft, Zoom, and Cisco. It offers some interesting features, including the ability to run virtual machines and enterprise browsers. However, the primary drawbacks are its cost and licensing model: IGEL has transitioned to a recurring subscription called Cosmos, which requires organizations to commit to perpetual payments to keep their devices managed and updated.

ThinScale ThinKiosk

ThinScale takes a fundamentally different approach by locking down the device's existing Windows operating system rather than replacing it. ThinKiosk runs as a secure shell on top of Windows, restricting the user interface to the VDI gateway only. While this allows organizations to leverage familiar Windows management tools such as SCCM or Intune and to use local Windows drivers for peripheral compatibility, it presents a significant risk regarding the Windows 10 End of Support. It appears that there is a Windows 11 IoT version, but it does not seem to be widely deployed. Because the underlying OS remains Windows 10, the kernel will no longer receive security patches after October 2025 unless the organization purchases Extended Security Updates (ESU) from Microsoft. Consequently, ThinKiosk is often better suited for BYOD scenarios where the organization does not own the underlying OS than for repurposing corporate assets, where the goal is to eliminate Windows maintenance and security issues.

10ZiG RepurpOS, PeakOS, NOS

10ZiG occupies a unique niche as a full-service vendor of zero and thin-client hardware and software. You can buy their devices with their own zero or thin-client OS preinstalled, or, with RepurpOS, wipe the legacy operating system from a device and replace it with their own secure thin-client operating system. The standout feature here is cost-efficiency: not only is its subscription price very competitive, but the 10ZiG Manager is free, with no license limits, making it a robust tool for most VDI deployments without the price tag of its enterprise competitors. In terms of unified communications, it includes redirection plugins for Zoom VDI, Microsoft Teams, and WebEx. RepurpOS can be used as a bridge solution for those who want to eventually move to 10ZiG's own hardware.

Citrix Endpoint OS

Following its acquisition of Unicon, Citrix now offers a fully verticalized solution in which the endpoint OS is a native extension of the Citrix platform. Its strategy involves using the Win2eLux migration tool to replace an existing device's Windows operating system with its eLux thin-client OS. Management is handled by the Scout Enterprise Management Suite, a highly scalable tool designed for massive deployments that integrates deeply with Citrix Cloud to provide end-to-end visibility from the datacenter to the device edge. Scout does allow third-party extensions, but its ecosystem does not seem as extensive as some others. It offers optimization for the Citrix HDX protocol and supports Unified Communications tools such as Microsoft Teams and Zoom. The primary trade-off is vendor lock-in; while this creates a seamless "one hand to shake" support experience, it commits the organization heavily to the Citrix ecosystem, potentially complicating future migrations if the business decides to switch VDI or DaaS providers to Omnissa (formerly VMware) or Microsoft Azure Virtual Desktop.

[Click on image for larger view.]

Final Thoughts
The thin-client landscape has evolved from simple terminals into a stratified market defined by massive consolidation and a pivot toward software-defined endpoints. Commodity hardware giants like Dell and HP increasingly rely on third-party operating systems to repurpose legacy assets. The industry's three major players have fractured into three strategic approaches: Citrix's closed vertical stack, IGEL's horizontal software-only layer, and 10ZiG's unique hybrid model offering both proprietary hardware and flexible software.

As the modern workspace shifts to a blend of VDI, DaaS, and WebApps, the choice of vendor ultimately hinges on the company's ability to support mixed access models seamlessly while avoiding the growing risks of vendor and technology lock-in and rigid and expensive licensing for the OS and its management portal.

Featured

Subscribe on YouTube