Wow perfect timing my company is about to start a big project to evaluate our Citrix setup! I'll let you know how it works out. Thanks!
No probs, happy to help, when you test if you find any other information that could be useful, please PM or post and I'll add it in
If you have locked down boxes with just browser capability how about also trying to navigate to:http://ikat.ha.cked.net/
Lots of custom, vbs, vbe, swf et al mini scripts to try and defeat lockdowns, I forgot to add this in to the exploitation phase but will be added on the final iteration.
Cool talk I attended at Defcon and thought apart from Kiosks may also help breaking out of Citrix user jails