Add your non-administrator RDP users to this local group so they can RDP directly to the machine.
From CTX228128 What is the HKLM\Software\Citrix\Port ICA\Direct Access Users registry function: The HKLM\Software\Citrix\Port ICA\Direct Access Users registry key determines which Local group the VDA references to determine if a user should be allowed Unbrokered RDP access.
When Citrix Virtual Delivery Agent is installed on a machine, non-administrators can no longer RDP to the machine.
You must take ownership and give admin users full control to be able to delete this value.
This section is more important for shared VDAs like RDSH (Windows Server 2008 R2, Windows Server 2012 R2, and Windows Server 2016).
For example: Position of the indicator is configurable by the user. Download it from CTX220774 Connection Quality Indicator and install it. Group Policy templates are located at C:\Program Files (x86)\Citrix\Connection Quality Indicator\Configuration.
Copy the files and folder to \Policies\Policy Definitions, or C:\Windows\Policy Definitions.
Citrix Discussions Xenapp 7.9: Wait for local session manager: “I have a Xenapp 7.9 environment on Windows 2012 R2.
When logging in through Citrix I got message “Wait for local session manager” for 20-30 seconds.For additional logon delay troubleshooting, see Alexander Ollischer Xen App/Xen Desktop – “Please Wait For Local Session Manager” message when logging into RDS.He found some Windows Updates that caused a logon delay.CTX212439 Desktop Session Stuck in Pre-Logon State with Message “Please wait for the Local Session Manager”: Some environments will not accept the default port 80 for Virtual Delivery Agent registration, even though registration is authenticated and encrypted on port 80. Several people in Citrix Discussions reported the following issue: If you see a message about RD Licensing Grace Period has expired even though RD Licensing is properly configured, see Eric Verdumen No remote Desktop Licence Server availible on RD Session Host server 2012.To change the port, do the following on the Virtual Delivery Agent: To enable Framehawk, see On 2012 R2 and newer RDSH, the only way to configure Remote Desktop Licensing is using group policy (local or domain). The solution was to delete the REG_BINARY in HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\Control\Terminal Server\RCM\Grace Period only leaving the default.The default permissions allow users to store files on the C: drive in places other than their profile.