“Create global objects” rights on a terminal server

I got exactly the same problem. Only my setup is a win2008r2 x64 On Vmware Esxi. Everytime the number of users logged on reached 40, any user that logged on from that moment gets an temporary profile.

Workaround:
Move some of the users to other virtualized Terminal Server instances.

Cause And Fix: The registry on our Server was bloated to over 2gb. Some printer drivers (Kyocera, Sharp) are malfunctioning, and copy some registry keys every time a user logs on to the Terminal Server bloating it in the process. Once we cleaned the registry the server went back to normal.

Do you know which system is running your web interface? That probably needs to be reconfigured along with the secure gateway. In theory, you should be able to connect directly to the server that's hosting the web interface without issue. Make sure your internal DNS points to the web interface and not the gateway, unless you're ultra paranoide about ICA security.

Secondly, check out this article on setting up a secure gateway from scratch. It will show you the various things to check. http://www.virtualizationadmin.com/articles-tutorials/terminal-services/security/install-configure-citrix-web-interface-secure-gateway-part2.html

Finally, it would help to have a diagram of which servers have which roles.