XPC vs Citrix Workspace app Desktop Lock
Direct boot to one virtual desktop, or a managed front door to several.
Citrix Workspace app Desktop Lock, also called direct boot to VDI, configures a Windows endpoint so users land straight in their Citrix virtual desktop with no access to the local OS. XPC keeps Windows installed and presents a locked, brandable interface in front of whichever remote-workspace connection is approved — Citrix included, but also RDP/RDS, Azure Virtual Desktop, Windows 365, Omnissa Horizon, Amazon WorkSpaces, Parallels RAS, VNC-compatible access and browser-delivered workspaces.
Citrix add-on · Vendor claims sourced from public documentation · Reviewed September 2026
The short answer
What is the difference between XPC and Citrix Workspace app Desktop Lock?
Citrix Workspace app Desktop Lock is a feature of Citrix Workspace app for Windows that configures a local desktop to boot directly into a Citrix virtual desktop, locking the user out of local resources and applications; since Workspace app 2503 it ships in the main installer and can be enabled by command line or Group Policy without requiring single sign-on. XPC is a separate, dedicated Windows endpoint-experience product that keeps Windows installed and presents a locked, brandable access screen in front of an approved remote-workspace connection, and it is deliberately platform-independent — it can present a Citrix desktop the same way it presents RDP/RDS, AVD, Windows 365, Omnissa Horizon, Amazon WorkSpaces, Parallels RAS, VNC-compatible access or a browser-delivered workspace, managed through the XPC Portal rather than through Citrix Group Policy objects.
1
Portal for every backend
XPC Portal governs Citrix and non-Citrix connections from one place.
3
Steps to deploy
Log in to the XPC Cloud Portal, install the MSI, enable XPC Mode.
$2
Per PC per month
Published per-endpoint pricing in USD, with 5 PCs free forever.
Row by row
XPC compared with Citrix Workspace app Desktop Lock.
Each row describes what the decision changes in practice. Citrix capabilities are summarised from the vendor's own public documentation, linked at the foot of this page.
Product role
XPC
Dedicated, platform-independent access shell for approved remote-workspace connections
Citrix Workspace app Desktop Lock
A Citrix Workspace app feature that boots a device directly into a Citrix virtual desktop
What happens to Windows
XPC
Windows stays, fully managed and fully compatible
Citrix Workspace app Desktop Lock
Windows also stays installed — Desktop Lock restricts access to it, it does not remove it
Backend flexibility
XPC
Built to be protocol-independent: Citrix, RDP/RDS, AVD, Windows 365, Omnissa Horizon, Amazon WorkSpaces, Parallels RAS, VNC-compatible access, browser workspaces
Citrix Workspace app Desktop Lock
Purpose-built for one destination: a Citrix DaaS or Virtual Apps and Desktops session
Deployment
XPC
Install the MSI, enable XPC Mode from the XPC Portal
Citrix Workspace app Desktop Lock
Since Workspace app 2503, enabled via command-line installer parameters or Group Policy after install, then a reboot
Management model
XPC
XPC Portal, purpose-built for MSPs governing many unrelated customer organisations from one place
Citrix Workspace app Desktop Lock
Managed through Citrix Group Policy Objects and Workspace app installer/command-line options
Single sign-on
XPC
Presents the approved connection per device or group; local authentication model is unaffected by XPC itself
Citrix Workspace app Desktop Lock
No longer requires SSON to enable, though Citrix recommends pairing it with SSON for a seamless experience
Branding of the interface
XPC
Fully brandable per organisation, site or device group — logo, colours, wallpaper and wording
Citrix Workspace app Desktop Lock
Presentation follows the Citrix Workspace app desktop viewer, locked in full-screen mode
Reversibility
XPC
An authorised admin suspends XPC Mode from the portal and the standard Windows shell returns
Citrix Workspace app Desktop Lock
Reversed by disabling the feature through policy or command line and rebooting
Strongest fit
XPC
MSPs and estates spanning several unrelated remote-access platforms, or single-purpose endpoints needing MSP-grade branding and multi-tenant management
Citrix Workspace app Desktop Lock
Single-purpose, all-Citrix frontline or kiosk endpoints where the only approved destination is one Citrix virtual desktop
Why teams choose XPC
Four reasons the simpler path wins.
Simplicity at the endpoint should not cost a platform migration, a second console or a new set of skills.
One shell for more than one backend
Desktop Lock is purpose-built to boot into a Citrix desktop. XPC presents the same locked experience whether the destination is Citrix, RDP/RDS, AVD, Windows 365, Omnissa Horizon, Amazon WorkSpaces, Parallels RAS, VNC-compatible access or a browser-delivered workspace — useful the moment an estate is not 100% Citrix.
Built for MSPs managing many customers
The XPC Portal is designed around one organisation administering many separate, unrelated customer environments with distinct branding — a different management shape from Citrix Group Policy Objects scoped to a single Citrix estate.
No Workspace app version or SSON dependency to track
Desktop Lock's current behaviour (integrated installer, decoupled from SSON) is tied to Workspace app 2503 and later. XPC's enablement is independent of which Citrix Workspace app version, if any, an endpoint happens to run.
Reversible from a portal, not a policy-and-reboot cycle
Suspending XPC Mode from the XPC Portal restores the full Windows shell without needing a Group Policy change and a device reboot.
The work you do not have to do
No migration project. No second console. No rollback plan to invent.
Onboarding, patching, monitoring, inventory, remote assistance, certificates, compliance reporting and recovery all keep running on the platform your team already knows.
A fair comparison
When Citrix Workspace app Desktop Lock is the better choice.
Citrix builds a capable product and there are estates it fits better than XPC. These are the situations where we would tell you so.
- Every endpoint's only approved destination is a Citrix virtual desktop, with no other protocol to support now or later.
- You are already standardised on Citrix Workspace app 2503 or later and want direct-boot-to-VDI managed through Citrix Group Policy alongside your existing Citrix administration.
- You want the tightest possible integration with Citrix single sign-on and the Citrix desktop viewer, with no independent management layer in between.
- The estate is small enough, or Citrix-only enough, that a second, dedicated management portal is not worth introducing.
Keep comparing
Other endpoint options, side by side.
XPC vs UniconOS
The full business case, with migration effort priced in engineer hours across a representative estate.
Read the comparisonXPC vs Microsoft Kiosk
What it actually takes to engineer a supportable kiosk from Windows features, versus installing XPC.
Read the comparisonXPC vs IGEL
IGEL replaces Windows with an immutable Linux OS managed by UMS. XPC keeps Windows and simplifies what the user sees.
Read the comparisonXPC vs ThinScale
The closest comparison: both keep Windows. XPC is a lighter, purpose-built access shell for approved remote, cloud and web-delivered workspaces, with a simple per-PC price.
Read the comparisonXPC vs Dell ThinOS
ThinOS ships on Dell thin-client hardware and is managed in Wyse Management Suite. XPC works on the Windows PCs you already own.
Read the comparisonXPC vs LEAF OS
LEAF OS repurposes old PCs by replacing Windows with Linux. XPC extends the same hardware while keeping Windows and its compatibility.
Read the comparisonXPC vs 10ZiG RepurpOS
RepurpOS converts PCs to a Linux thin-client OS. XPC gets the same focused endpoint without a migration or a new console.
Read the comparisonXPC vs Citrix WEM Transformer
Transformer turns a WEM-managed Windows PC into a reversible kiosk for Citrix. XPC is a dedicated, platform-independent access shell built for MSPs across many unrelated remote-access backends.
Read the comparisonSources
Reviewed September 2026. Third-party capabilities are summarised from the vendor's own public documentation and may change. Citrix and its product names are trademarks of their respective owners; XPC is not affiliated with or endorsed by Citrix. Nothing on this page is a benchmark, a measured result or a commitment.
Thin-client simplicity, without leaving Windows.
Five PCs are free forever. Log in to the XPC Cloud Portal, install the MSI, enable XPC Mode.