LEAF OS (x64 for PC) vs. LEAF OS Go (USB Pendrive)
How to choose the right secure endpoint deployment option for repurposed PCs, BYOD, and remote access scenarios
This article explains the differences between LEAF OS for x86-64 PCs/laptops and LEAF OS Go delivered on a USB pendrive. Both options provide a locked-down, Linux-based endpoint environment designed to access virtual desktops, cloud desktops, and DaaS/VDI platforms. The main difference is the deployment model: LEAF OS is best for fixed, IT-managed endpoints, while LEAF OS Go is designed for portable, USB-booted access without altering the host device.
|
Quick answer: Choose LEAF OS for fixed, managed endpoint deployments. Choose LEAF OS Go when users need a portable, secure USB workspace for BYOD, remote work, contractors, or temporary access. |
|
Requirement |
Recommended Option |
Reason |
|
Repurpose company-owned PCs or laptops as managed endpoints |
LEAF OS |
Better fit for fixed deployments and internal drive installation. |
|
Give BYOD users secure access without changing their personal device |
LEAF OS Go |
Boots from the USB pendrive and leaves the host OS and local storage unchanged. |
|
Deploy in computer labs, offices, kiosks, shared workstations |
LEAF OS |
Supports a consistent, device-centric profile and management model. |
|
Support contractors, partners, or temporary staff |
LEAF OS Go |
Portable workspace can be issued, returned, or reassigned more easily. |
|
Avoid shipping dedicated endpoint hardware to remote users |
LEAF OS Go |
Users can boot a compatible PC/laptop from the NComputing USB pendrive. |
Note: SKUs and pricing can change. Always confirm against the latest NComputing price list before quoting customers.
|
Category |
LEAF OS (x64 for PC) |
LEAF OS Go (USB Pendrive) |
|
Primary purpose |
Repurpose an existing x86-64 PC, laptop, or compatible thin client into a secure, centrally managed endpoint. |
Provide a portable, USB-bootable LEAF OS workspace that can be used on compatible PCs/laptops without changing the host device. |
|
Portability |
Tied to the specific managed device or deployment target. |
Portable. The same LEAF OS Go USB pendrive can be used to boot compatible PCs/laptops, subject to licensing and hardware compatibility. |
|
Best for |
Corporate-owned endpoints, aging Windows PCs, labs, classrooms, offices, kiosks, shared workstations, and fixed endpoint deployments. |
BYOD users, remote workers, contractors, partners, temporary staff, and users who need a secure portable workspace. |
|
Benefits |
Extends hardware life, reduces PC refresh costs, strengthens endpoint security, centralizes configuration and updates, and supports a consistent endpoint experience. |
Enables secure BYOD and remote work, keeps the host OS untouched, separates corporate access from personal devices, and simplifies temporary access logistics. |
|
Deployment method |
Boot from a generic USB thumb drive by default, or install to internal storage such as HDD, SSD, eMMC, or NVMe for a more permanent endpoint deployment. PXE boot enables large-scale device repurposing with LEAF OS. |
Boot from the NComputing LEAF OS Go USB pendrive. Remove the USB drive and reboot to return to the native host OS. |
|
Host device impact |
If installed to internal storage, the device becomes a dedicated LEAF OS endpoint. If booted from USB, the native OS remains untouched. |
Host device remains unchanged. LEAF OS Go runs from the USB pendrive as a separate secure environment. |
|
Target users |
IT-managed users, office users, shared endpoint users, labs, classrooms, frontline workers, and kiosk-style deployments. |
BYOD users, remote workers, contractors, partners, temporary staff, and users who need secure access from different locations. |
|
Security model |
Locked-down Linux endpoint OS with centralized policy control. User data is intended to remain in the virtual/cloud environment rather than on the endpoint. |
Read-only LEAF OS environment on USB with no user data storage on the drive, helping isolate corporate access from the host device. |
|
Management |
Managed by PMC Endpoint Manager. |
Managed by PMC Endpoint Manager. |
|
Minimum hardware |
Standard x86-64 compatible processor with BIOS or UEFI, USB boot support, 2 GB RAM, and 8 GB internal storage when installing to the internal drive. 4 GB RAM is recommended for heavy local app usage. |
Standard x86-64 compatible processor with BIOS or UEFI and USB boot support, plus 2 GB RAM. 4 GB RAM is recommended for heavy local app usage. |
|
License type |
Perpetual or annual subscription, depending on purchased SKU. |
Perpetual or annual subscription, depending on purchased SKU. |
|
USB / hardware requirement |
A generic USB thumb drive can be used for booting or installation. Internal drive installation is recommended for fixed deployments when USB booting is not desired. |
Requires the NComputing LEAF OS Go USB pendrive, such as NC-USB-32G, for production deployment. The USB drive is sold separately. |
|
Ordering notes |
LEAF OS license SKUs: LEAFOS-P-100, LEAFOS-1A-100, LEAFOS-3A-100, LEAFOS-5A-100. |
LEAF OS license SKUs: LEAFOS-GO-P-100, LEAFOS-GO-1A-100, LEAFOS-GO-3A-100, LEAFOS-GO-5A-100. NComputing USB pendrive SKU: NC-USB-32G. |
|
Best-fit summary |
Use when the organization wants a fixed, managed endpoint experience on known hardware. |
Use when the organization wants a portable, secure workspace that can run on compatible PCs/laptops without changing the host device. |
|
Choose LEAF OS when... |
Choose LEAF OS Go when... |
|
· You want to repurpose existing company-owned PCs or laptops. · You need a fixed, centrally managed endpoint for office, lab, classroom, kiosk, or shared workstation deployments. · You prefer to install LEAF OS onto the internal drive for a more permanent endpoint configuration. · You want a consistent endpoint profile managed by PMC Endpoint Manager. · You are planning a Windows 10 end-of-life or PC refresh avoidance project. |
· You need secure access for BYOD users without modifying their personal PC or laptop. · You support remote workers, contractors, partners, or temporary staff. · You want to issue a portable USB workspace instead of shipping dedicated endpoint hardware. · You need the user to reboot back to the native host OS after work. · You want a simple way to provide a locked-down endpoint experience from a USB pendrive. |
It can be used on compatible x86-64 PCs/laptops that support USB boot. Hardware compatibility, firmware settings, Secure Boot behavior, and required drivers should be validated before large-scale rollout.
No. LEAF OS Go boots from the USB pendrive. When the pendrive is removed and the computer is rebooted, the host device returns to its native operating system.
For production deployment, customers should use the NComputing LEAF OS Go USB pendrive. Evaluation or special logistics workflows should follow NComputing-provided guidance.
Yes. Both LEAF OS and LEAF OS Go can be centrally managed using PMC Endpoint Manager.
Both can help. LEAF OS is typically better for fixed PC repurposing, while LEAF OS Go is better when users need portable, secure access without modifying the host device.
LEAF OS Go (USB pendrive) datasheet: https://ncomputing.box.com/shared/static/h0kftzbi324chsaham5am8ekntzg8rqj.pdf
LEAF OS (x86-64) Software Endpoint datasheet: https://ncomputing.box.com/shared/static/28zzbmcqyw8fgqsuthuptepouoj7wot9.pdf