So, with linux everything is clear. How about customizing Windows?

Question

Windows

Hello dear experts!
In the last post, there was a search for a desktop OS based on linux that was "cut down" to the point of impossibility, but it turned out to be not easy, and, as commentators noted, it is really extremely inconvenient to use. OK. Then you have to take the path of least resistance.
Once again I will describe the problem.
I (as well as the management of the company I work for) want no user data to be stored locally. Our company has deployed an rdp server to work in 1C. The server has sufficient capabilities to organize the work of all users on it. Therefore it would be desirable to tire out all users there. I would like to get a windows distribution with very limited features. Almost everything should be banned! The user should turn on the computer and see the only mstsc application on the desktop. From the start-up options, only turning off the computer, and in the system tray, only the clock and the ability to connect Wi-Fi, well, the battery level. And that's it! Naturally, the context menu and hotkeys should also be disabled.
About PXE.
The thing is extremely convenient and for all my Wishlist, it seems to be suitable, but we are a trading company and salespeople are often absent from the office, and they need to have access to their workplace even outside the twisted-pair cable. Since access to the terminal is organized through a VPN, now they can launch the VPN by connecting the Internet from the phone, and now they are already working.
Tell me, experts, by what means can I assemble such a distribution kit?

Answer 1

> I (like the management of the company I work for)
"Never a techie, but I know better than anyone"
You need a computer to boot over the network and run an RDP client, and you are trying to do some kind of universal crap for everything.
In the office, a thin client on Linux in squashfs is enough for the eyes, which boots over the network and launches the RDP client.
> and salespeople are often absent from the office, and they need to have access to their workplace even outside of twisted pair access
. And so we will add hemorrhoids to them depending on the quality of the Internet connection, because the salesperson must suffer, yeah. Make a limited account if you don't trust people.

Answer 2

And what prevented you from building an assembly on Linux with auto-raising VPN and auto-login to RDP? For me, this is much easier to do on Linux than on Windows ...
On Windows, it is possible to set a list of ALLOWED applications through group policies (according to the principle, everything that is not allowed is prohibited ...) Add system services there, and RPD (let's not forget all sorts of printers - usb keys if necessary) and all this on a limited account ... In theory, it should take off.
Another option is to use a third-party limiter - such as Kaspersky - a list of available applications is set, the rest will ask for a password ...

Answer 3

Just look towards Citrix solutions and don't bother with low-level details.

Answer 4

Windows Minimal?
Windows Embedded Compact 7
Windows Fundamentals for Legacy PCs (XP)
and thousands of others based on WinPE
Or do you still need to make "terminals" out of workstations?