I have created a GPO to lock down users to an extreme degree. I have moved all Domain Users into the local Users Group. Initially Citrix Program Neighborhood would not start due to the Users Group not having permissions to write to C:\WFCNAME.INI. I fixed this and now Program Neighborhood starts, however after starting the application icon and logging in with network credentials (even Domain Admin credentials) I receive an unable to connect to Citrix server message. The computer works fine as I logged into the system with my ID (Domain Admin) and was able to start the programs without issue. I also tried giving the Users Group modify access to C:\Program Files\Citrix\ICA Client full directory and all files. The GPO has properly propagated as the permissions are viewable on the files. Any ideas?