Well but in Citrix (when I used it in the past) we only published applications so there was no need to hide or lock the items on the server as the user didn't have access to them anyways.

But that's cool - just didn't want someone to come along that was having a basic syntax type error (that happens a lot to new users) then thinking maybe something like this was their issue.