ThinOS 9: Essential Endpoint Configuration — Dell WMS

ThinOS 9.x is Dell’s most complete thin client operating system. Linux-based, it offers native support for Citrix, VMware Horizon, Microsoft RDS, Amazon WorkSpaces, and other brokers — all managed centrally from WMS.

WMS Policy Structure

A WMS policy is a JSON document defining a device’s complete configuration. It applies in cascade:

Global Group (base)
    └── Country / Department Group (override)
            └── Function Group (final override)

Minimal policy structure:

{
  "Version": "9.1.3",
  "ConnectionBroker": {
    "Type": "Citrix",
    "ServerURL": "https://storefront.yourcompany.com",
    "AutoLaunch": true,
    "DefaultResource": "Desktop_Windows10"
  },
  "Network": {
    "VLAN": 20,
    "DNS": ["192.168.1.10", "192.168.1.11"],
    "NTPServer": "pool.ntp.org"
  },
  "Security": {
    "USBStorage": false,
    "Screenshot": false,
    "LocalPrinting": true
  },
  "Display": {
    "DualMonitor": true,
    "Resolution": "1920x1080",
    "RefreshRate": 60
  }
}

VDI Broker Configuration

Citrix Virtual Apps and Desktops

For Citrix Workspace with StoreFront:

{
  "ConnectionBroker": {
    "Type": "Citrix",
    "ServerURL": "https://storefront.yourcompany.com",
    "StoreURL": "/Citrix/Store",
    "AuthMethod": "DomainPassthrough",
    "HDXEnabled": true,
    "H264Enabled": true,
    "AudioQuality": "High"
  }
}

With DomainPassthrough, users get automatic SSO if the device is domain-joined. If Thin Clients aren’t domain members, use UserDefined to show the Citrix login screen.

VMware Horizon

{
  "ConnectionBroker": {
    "Type": "VMwareView",
    "ServerURL": "https://horizon.yourcompany.com",
    "Protocol": "Blast",
    "BlastH264": true,
    "AutoConnectDesktop": "Desktop_Win11"
  }
}

Blast Extreme is recommended over PCoIP for networks with limited bandwidth or high latency.

Microsoft RDS / Azure Virtual Desktop

{
  "ConnectionBroker": {
    "Type": "RDS",
    "GatewayURL": "https://rdgateway.yourcompany.com",
    "FarmName": "RDS_Farm_01",
    "UseGateway": true,
    "AudioRedirect": true
  }
}

Peripheral Management

Printers

{
  "Printers": [
    {
      "Name": "HP_OfficeJet_Floor2",
      "IPAddress": "192.168.20.55",
      "Driver": "HP Universal Print Driver",
      "Default": true
    }
  ]
}

For Follow-Me printing environments (Uniflow, PaperCut), configure the virtual queue driver and let the print server handle physical redirection.

Barcode Scanners and USB Devices

USB scanners redirect automatically to the VDI session if they’re on the allowed devices list:

{
  "USB": {
    "ClassFilter": ["HID", "Imaging"],
    "VendorFilter": [
      {"VID": "0536", "PID": "01F5", "Name": "Zebra_DS2208"}
    ]
  }
}

At Radial Netherlands we used Zebra DS2208 scanners in all warehouses. USB redirection worked transparently with Citrix Virtual Channel.

Endpoint Security

USB Port Control

In regulated environments (healthcare, pharma, finance), USB device control is critical:

{
  "Security": {
    "USBStorage": false,
    "USBKeyboard": true,
    "USBMouse": true,
    "USBHub": true,
    "USBPrinter": true,
    "USBSmartCard": true,
    "CDROMDrive": false,
    "FloppyDrive": false
  }
}

This configuration allows keyboard, mouse, printer, and smart card while completely blocking USB mass storage read/write and optical drives.

Automatic Screen Lock

{
  "ScreenSaver": {
    "Enabled": true,
    "Timeout": 300,
    "LockOnResume": true,
    "PasswordRequired": true
  }
}

Firmware OTA Updates

The update process in WMS can be fully automated:

Upload firmware to the WMS repository from the Dell Support Portal
Create an update task with a maintenance window
Assign the target group of devices
Monitor progress from the console

{
  "FirmwareUpdate": {
    "AutoUpdate": true,
    "MaintenanceWindow": {
      "StartTime": "02:00",
      "EndTime": "04:00",
      "Days": ["Monday", "Wednesday"]
    },
    "TargetVersion": "9.1.3025",
    "RebootAfterUpdate": true
  }
}

Always update a pilot group of 5-10 devices before deploying to the entire fleet. This catches compatibility issues before impacting production.

Have a specific VDI environment and need configuration help? Reach out directly for a personalized technical consultation.