Thinlabs Quad Core Computers Available with Windows Embedded 8.1 Industry

Thinlabs is pleased to announce that our Quad Core-based Integrated Thin Client Computers are now available with Microsoft Windows Embedded 8.1 Industry, a must for retail, manufacturing, healthcare and other industries requiring secure and reliable specialized functions of POS terminals, ATMs, automated manufacturing solutions, medical devices and more.

The following additional features are included in Windows Embedded 8.1 Industry:

Embedded Lockdown Manager (ELM)

  • Dialog Filter - Prevents undesirable pop-up windows and dialog boxes from appearing on the screen
  • Keyboard Filter - Suppresses undesirable key combinations, such as Ctrl+Alt+Delete
  • Shell Launcher - Launches an alternate shell instead of the standard Windows 8 shell
  • Unified Write Filter - Protects physical media from write operations
  • USB Filter - Prevents unauthorized USB devices from connecting to USB ports
  • Toast Notification Filter - Prevents toast notifications from displaying in Industry 8.1
  • Windows 8 Application Launcher - Launches a Windows Store app immediately when a configured account signs in
  • Gesture Filter - Blocks undesirable edge gestures. You cannot use ELM to configure this feature in Standard 8

New & Improved Network Features

  • Near Field Communication (NFC) - To set up printing, end users can now tap devices against an enterprise NFC-enabled printer and attach NFC tags to existing printers
  • Wi-Fi Printing - Users can now connect to Wi-Fi Direct printers without adding additional drivers or software to their device, forming a peer-to-peer network between the device and printer
  • End users can pair devices through Wi-Fi Direct using NFC and then project content wirelessly from a Miracast-enabled device
  • VPN - Configure VPN client to connect automatically for Microsoft and third-party inbox VPN clients
  • Work Folders - Using Work Folders, end users can now create new work files and keep local copies of work files on their devices that automatically synchronize to a data center. Files created locally will sync back to the file server in the corporate environment. IT can enforce Dynamic Access Control policies on the Work Folder Sync Share, including automated digital rights management, and can require Workplace Join to be in place.

Added Authentication and Security Features

  • Enhance Sign-In - End users can now sign in and authenticate devices using fingerprint-based biometrics and Virtual Smart Cards
  • Device Encryption - previously found on Windows RT and Windows Phone 8 is now available in all editions of Windows. On Windows 8.1 Pro and Enterprise editions, the administrator can additionally configure BitLocker protection and add management capability
  • Web Application Proxy - enables an administrator to publish access to corporate resources, enforce multi-factor authentication, and verify a device before granting access. There is no need to provide Remote Access through Direct Access or VPN. The Web Application Proxy is a new role service in the Windows Server Remote Access role
  • Remote Business Data Removal - Corporate data can now be identified as corporate or end user, and be encrypted or wiped on command
  • Trusted Platform Module (TPM) - Services such as Active Directory and web services that use certificates for authentication can now require that the certificate be bound to the hardware. This is called TPM Attestation.
  • Certificate Authentication - Certificate Reputation is cloud-based service that helps protect against fraudulent certificates and help maintain trust in public key infrastructure (PKI) and the Internet. The service can detect when certificates are issued by unexpected sources, investigate any anomalies, initiate revocation, and notify certificate authority (CA) partners.
  • Workplace Join - Administrators can now grant access to some corporate resources to devices not based on Windows and still enforce governance parameters on the device. Devices no longer need to be domain-joined.

Note: These capabilities work with the Dynamic Access Control features in Windows Server 2012 R2. The device must be registered with Active Directory, which allows access to corporate resources that have been published with conditional access policies.

New / Changed Management Features

  • Remote Desktop Services - The virtual desktop infrastructure in Windows Server 2012 R2 enables administrators to view and remotely control active end user sessions from a Remote Desktop Session host server.
  • Open Mobile Device Management (MDM) - Administrators can now use third-party MDM solutions to manage Windows 8.1.

Windows Embedded 8.1 Industry is available in our KREIOS Box Client Module, as well as our HELIOS and ARGUS Quad Core Integrated All-In-One Computers. Contact a Thinlabs representative today for more information!


The following websites were referenced for this blog: