I am trying to see why would you even try and place this account through domain GPO, why not place the said account in appropriate built-in groups (Administrator etc.) and get over with it.
FYI, Citrix PS 4.5 and above has eliminated all accounts other than "ctx_cpsvcuser", that's the only account require for functioning and that handles everything. You can simply give appropriate rights to this account and everything works fine. Hope this helps. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
