Thin Clients suck.
Unless you're sitting at a TC terminal within line of sight of the TC Server, connected via FibreOptic (& a fat pipe at that), and the only one using the Server at the time, the latency between user action & Server sending back the results is a massive PITA. The more users, the greater the distance between user & Server, the thinner the bandwidth pipe between user & Server, and the hardware capacity of the Server, the worse it gets for everyone involved. Your Server may have a Tb of RAM & an ExaByte of storeage, but if it's serving a million users via 10-Base-T then nobody is going to Get Shit Done. You can have a ExaByte/Second FO connection to a single user, but it won't mean squat if the Server is running on an 8088 with 1Meg RAM & a single low density, single sided, improperly formatted Floppy. You have to find the sweet spot of Number of Users, bandwidth pipe to serve them, & Server capacity in order to do it right, and all too often some bunghole in Manglement will cut corners, save money, & make themselves look good to the rest of Upper Manglement/BeanCounters at the expense of creating a working condition that doesn't allow anyone to Get Shit Done. Maybe with an unlimited budget & Managers With A Clue (do those exist?) you could deploy a TC network that lets folks GSD, but more often than not it's just a nightmare of users complaining that their terminal is too slow, the network is too slow, the server is too slow, and they're sick & fekkin tired of watching the screen display e.a.c.h. i.n.d.i.v.i.d.u.a.l. l.e.t.t.e.r. o.f. e.a.c.h. e.m.a.i.l... It's most obvious when everyone shows up at the office, turns on their clients, & tries to log on. If the Server goes from idle to suddenly trying to process 1,000+ users all at once, chances are good it's going to shite itself trying to GSD. If you configure the Server to handle the load at peak times, then the Bean Counters whine about it being under-utilized the REST of the time. If you make the users happy then the Bean Counters gripe; if you make the BC's happy then none of the employees will be (but the Share Holders will love it). It's easier to give each user their own full desktop machine, a standard image, lock it down so they can't do anything to it, & then use corporate/GPO rules to lock them out of the stuff they have no business fiddling with. You deploy updates & security patches from a central WSUS server, you know exactly how many licenses you're using (1 license: 1 Machine), and you don't have to use an OC768 just to handle the intra-office bandwidth between a TC Server & the local users. Toss in Remote Users to the mix & you can kiss productivity goodbye. How do you install a TC in an employee's home via a hard wired, secure, stable ComLink so you can trust that it's them logging on, it's an approved machine doing it, & there aren't any MITM attacks along the way? You can't. You need a VPN for that. And a full on desktop or laptop. Sure you could TRY to use a ChromeBook, but how do you make sure the remote user hasn't compromised the machine to allow them to BE the MITM vector? You can't. If you don't maintain physical control over the TC terminal, the network used to connect to the TC Server, & the data sent over that pipe, you can't pass any sort of Security test from HIPPA, Government Security Clearance, or Regulatory Oversight requirements. So sure a TC may sound all nice & cheap & easy to maintain, but what you save at the user's desk is more than eaten up by everything ELSE required to support them. Get a full desktop, hook it to the intra office CAT6, link it to the local Server, and don't let anyone in the building without proper ID. Firewall off the Intranet from the Internet, and don't let anyone that doesn't *require* such cross-access to have it. And no, tweeting on their FarceBook & watching cat porn videos on Youtube is NOT a requirement, even if it IS your boss demanding it. Remind him that Corporate Policy & TLA Laws require that the two shall never meet, & You Shall Not Pass.
*Cough*
Sorry for the long winded nature, but I had to deal with TC & Servers at a Global Communications Company, and even WITH a FO backbone *inside the office*, a Server with more capacity than most would believe possible, AND the Manglement permission to "make it work", it *ALWAYS* brought the users to frustration, us IT Drones to tears, & my supervisor to his knees dealing with the complaints. "It's too slow!", "I can't open email in under 5 seconds!", "I can watch the screen redraw the mouse pointer!". Really? Your TC terminal has the hardware to make it a full on desktop powerhouse, and the ONLY "bottleneck" is the FO link. You've got lag in the low single digit milisecond, the Server shows it's able to respond to you in under 15ms, and yet you claim to watch the screen refresh? How about if we staple your tongue to a passing bus? GAH!
*Sigh*
TL;DR: Thin Clients Suck. Just give them a local desktop, lock it down, & save yourself the ulcer.