Remote desktop connections to an initial program fail to launch with the following message:
"To log on to this remote computer, you must have Terminal Server User Access permissions on this computer. By default, members of the Remote Desktop Users group have these permissions. If you are not a member of the Remote Desktop Users group or another group that has these permissions, or if the Remote Desktop User group does not have these permissions, you must be granted these permissions manually."
Upon installation, Citrix adds tabs to the RDP-TCP Listener Properties in the Terminal Services Configuration. By default, the Environment tab has the Run initial program specified by user profile and Remote Desktop Connection or Terminal Services client radio button selected. Also, the Citrix Settings tab has Only allow administrators to create desktop connections selected.