Ive used thinapp, and pushed it to a desktop before, but haven't seen a case where I can just have someone login to a desktop that is virtual and only see and work in one application.. so they can't close it and use the desktop for other things...
without getting into a bunch of windows scripting..
