We have win10 machines that’s only function is to host the Horizon View Client v5.3 and want to hide or prevent the end user from access the local machine. These are domain machines and we have limited control of the GroupPolicy‘s and thus limited admin rights. We have tried modifying the registry shell key so that the machine only presents the HorClient after login, but log offs have become problematic, as the user gets a blank screen when they disconnect from the VM. Our current thought is to use DEM to lockdown the client PC. Thoughts?