Hi Iceman9t9
Once we get things configured exactly like we want, we have the thin clients set to boot on LAN. A fog server control panel is presented for a few moments, but if the user does nothing it will simply boot into TC. But at the fog screen, we can register a device, create an image, etc. Hopefully, we can build a fully working image. Like you, I'm not overly thrilled with how the security is managed. I really should say, I'm not as familiar with it, so we have to learn some things there. Like you, getting sound to work on the thin client with ALSA is a no brainer, but passing sound from the server to the thin client is another story. It works perfectly on Ubuntu. But as mentioned here, perhaps alsa is just not supported with this rdesktop.tcz.
We started using thin clients some years ago, and they got bad press. But trying to explain to the users that their poorly implemented Windows desktop environment (low provisioned apps servers, and other issues) had nothing to do with the thin client itself, is like talking to a wall. Further, when we upgraded to 2008 R2, the rdp client that came packed in with these Igels was out of date and simply won't connect to server 2008R2, no matter how low we dropped the security settings server side. It's even a problem with Win XP unless you update the terminal server client. That's not easy to do with the Igels. Might as well just throw another OS on there, which is where we're at now.
Now that TC has a fairly updated version of rdesktop, we can connect just fine. Now it's time for us to provision our server stack to give a user everything they need to do their job, and some times they watch product knowledge videos which requires sound. So this is something I would love to see solved as well.