Going back to this topic.
Finally had a moment to take an old desktop, install Fedora 29 stock on it, run updates and installed remmina. It now connects to our ERP system just fine. Opened Firefox to O365 web portal for email and Excel Online. Boss was impressed. Informed him that, instead of Group Policy, we would place these types of machines in an untrusted zone with just access to the Internet and open ports to the Salt Stack master and the ERP system between the trusted and untrusted zones. Boss still impressed.
He asked about comparison between Fedora Linux management and Google Chromebook management. Where SaltStack is free, we would have to pay for Google Enterprise administration on an annual basis.
Not there yet, but a step in the right direction.