I'm currently investigating options regarding thin clients following a move to a system based on Microsoft Remote Desktop Services. Currently users are using their existing desktops as RDP clients, but at some point this hardware will be due for replacement, prompting me to investigate thin clients in a little more detail.
I've been spending some time looking into the HP thin client range, which offer a number of OS options, including Windows Embedded.
One of the main reasons for switching to thin clients would be the reduced management burden compared to fat desktops. From the point of view of hardware maintenance, it seems quite obvious why that would be the case. From a software point of view, I appreciate that write filters reduce maintenance requirements, but I'm unsure how things would work when it comes to OS updates. This has led me to wonder - is it normal practice to keep Windows Embedded thin clients up to date in terms of security and reliability patches in the same way that one would with the full version of Windows (Windows Update, WSUS, etc)? If it's different, how exactly, and why? If it's more or less the same, it seems to negate one of the main advantages of switching to thin clients (at least where Windows Embedded is concerned).
In my particular case, it looks as though I would have the thin client configured in kiosk mode to drop straight into the RDP client, so security updates seem less of an issue. However, I get the impression that thin clients are also used as browser terminals for web-based apps, in which case security updates would be more of a concern.
I'd appreciate it if someone with some in the trenches experience can fill in some of the blanks to help me understand things a little better.