I thought about this, I know UEM pretty well but I want to restrict access to the desktop pools themselves but UEM is more aimed at restricting items and resources 'within' the desktop, by which point they would already be onboard.