Config help: Printer and Drive mappings per application, in the Profiles / User Environment forum on BrianMadden.com

Trying to 'extend' our Citrix deployment beyond what we'd initially wanted it to do:

We're in a clinical environment and thus did not want any of the users printing or saving to home machines. Thus, our default policy turns off client printer and file support. This is fine, and the users don't really have grounds to object to this.

However, there are some web applications (only available at work, not clinical in nature) that some of our users would like to print/save from remotely. So the trick is that I have to somehow give them access to client drives and printers ONLY for that published (a locked down copy of Firefox) application.

I'm a loss as to how to accomplish this. My initial thought was to have one generic domain account that users could use to access this application (a policy in PSC then allows file+print access for this one account.) This certainly works...until more than one user logs in, and connects to the session that someone else was using.

I do NOT want to have to create duplicate accounts for all the users wanting this type of access. But I'm struggling to find a way to give the users rights to print when launching one app, but not others.

Any clever ideas?

Environment:
Two CPS 4.5 in one farm on win2003
All clients connecting via Web Interface

Think I figured it out:

-Create the application, and then set it up for anonymous user access
-Create a policy that allows the anonymous users to map their local printers and drives.

Now I need to figure out how to customize the login script to detect if a user is both coming from a Citrix box and is anonymous user. Do these variables (like username) get set pre-Windows login script? If so, I would guess 'username' would be 'anon*'?