Some thing I have been work on in my very little free time.
You know "Browservice" project right? He made a software that pushes endless stream of JPEG images to the browser that contain a website rendered by Chromium engine. Complete with fake address bar and front end JavaScript to capture keyboard and mouse. The idea sounds so ridiculous, so crazy, but it actually works on almost every OS and almost every old browser. Problem of "Browservice" is it doesn't feel convincing. IE constantly downloading images and status bar goes crazy (it appears that the memory leak exists). Also very slow when website has a animating.
I did something similar but using RDP. Only for IE5 and IE6. Should work Win98/ME/2000/XP<SP3. I develop in XPSP2 IE6 and WinME IE 5.5 for now.
Since it's ActiveX control, I am inside of IEXPLORE.EXE and have full control (that's how drive-by downloads installed spyware and virus back in the days). I use the power to intercept the menu, toolbar, address bar, status bar, etc. IE becomes only a bit of GUI under my control. All commands are redirected to remote server running Chromium engine there. RDP has the feature "Virtual Channel" to send messages (WTSVirtualChannelOpen etc.)
My implementation so far browsing experience feels 99% like using real Internet Explorer because RDP protocol is much faster and get clipboard support, access to local hard drive, sound, video streaming, etc. for free by Microsoft.
Unfortunately still very early in development. Downloads not yet work. History not yet work. Popup window not yet work (very difficult).
But I hope that in a few months from now good old Win9x and Win2000 can join a modern Internet again.
Backend in C#. Frontend in Visual Basic 6 with OLEEXP and patched SSUBTMR (just to prove it can be done, but it is painful).
Maybe you will say that's the fake screenshot. Okay, you can do it. I don't have the argument at the moment. But soon I hope to show it running on real hardware.