As for the suggestion about copying creating the ghost user and such, Im not sure all that work would pay off in this scenario as I have tried using the domain admin account (pretty much the most security capable account in our network) to access IE via the citrix session and it still doesnt work.