Procmon

Copy procmon.exe and psexec.exe to c:windowssystem32

psexec -i -s -d procmon.exe

This command runs procmon interactive as the system account.

You can use this to troubleshoot Citrix user permissions issues.

Filter based on result "ACCESS DENIED"