The mouse lag was related to how, for various reasons, instead of doing local compositing of the mouse pointer, it had to be sent back to server, composited the

The mouse lag was related to how, for various reasons, instead of doing local compositing of the mouse pointer, it had to be sent back to server, composited there, and sent back again, just to enable nice shadows. That was one such setting. As for the time I implemented the setup - we tried to deliver as good environment as we could given physical and regulatory constraints available. Our solution meant that people could move around, use their preferred environments for all other work, while not having "sad men from german federal government" showing up if, for example, they lost a laptop on a train. This also meant that they could work on the data from home (which became extra important as COVID hit) instead of closed off section of few offices where they might have to undergo searches at entry and exit. Personally I nearly risked the job myself just to deliver on the promise that the end user was never asked for a password after initial login (or when unlocking the screen). We also did use the environment ourselves because sometimes it was easiest way to connect there at all. You can do VDI right - but usually the reason to even spend money on anything non-token is because there are really important reasons to go that way. And it's not like you're going to be allowed to do whatever you want on a laptop if you're going to touch sensitive data.