When I try and shadow a user I get an Error 5 Access Denied
On the Citrix Server there is a tool called Terminal Services Configuration. You need to ensure that your user has the remote control right to the ICA protocol.