there is a hook in appinit that does this (upmhook.dll)

 –-

Yes, the VDA always uses the UPN form to log the user into the desktop, rather than separately filling in the domain. According to MS public documentation, both forms are equivalent ways to authenticate the user.