I am doing the same method; we are using AD and have kiosk security groups; we are using the systems MAC"s as logins and security groups to give image access.
You can set up to auto lunch the VMware Horiozn View that way; there isn't a best method it's whats going to work well. It sounds like you are on the right path to me
I don't know about the share generic login. Go with the MAC address generated logins it's a bit more secure and the password is hidden as you can just connect with devices mac over a share login