1. Launch Citrix Connection Configuration
2. Choose Security, Permissions
3. Select the group the user belongs to (you may need to create a unique group called "shadow" or something like that)
4. from the Type of Access drop-down box, choose Special Access
5. Click the Shadow check box
That's it!
Hope this helps