Yes, it works the same as a normal w/s, except you have to disable the write
filter on your device. In our case I found it easier NOT to import the
devices into our domain. We just connect to a Win2003 Terminal Server.
The issues came when imaging the devices. Sysprep, etc seemed like overkill
for what we needed the devices to do. I started out with Active Directory
Group Policies for the devices, but found equivalent registry changes that
made it not necessary for the GPO.
One of the issues was some users reported the devices leaving the domain
after a month or so by themselves because of the way MS reconfirms the
domain members (and the write filter was on, preventing confirmation)
BTW, the fix for this was to alter the registry in the devices:
HKLM\System\CCS\Services\NetLogon\Parmameters\DisablePasswordChange=1
Graham