I keep a hidden "login.log" in the root of each users home share which records their workstation (@WKSTA), login server (@LSERVER), Citrix client name, thick/thin client type, date and times as well as all the debug information from all the bits of the login scripts that are executed.

As an administrator I just check the log file in the users' home directory for a history of their logins.