Thank you for the input! Yes, I would probably distribute one ADE file for each user on the Citrix box as opposed to one ADE on each remote computer... this is what you mean, right?
Also, is using a VPN the usual way users connect to the Citrix box and if so is this transparent to the user? (I really am not familiar with Citrix but I know there is an ICA Client.) I want to keep this as simple, reliable and as quick as I can for the user.