Citrix Printing Configuration

Citrix XenApp 6.5 on Server 2008R2, user profiles handled by Citrix Profile Management -  Considering the various options, can I get some recommendations for configuring printing in the following scenario?

I have a fleet of laptops connected to a LAN.  Laptops are locked down, and users rely on Citrix for certain published apps and printing.  Different users can user the laptops. Printers are located in different parts of the campus, but are not necessarily on different subnets.  

For these laptop user, I want printing done on the "network pathway" with spooling done on the print server.

Question:  Part 1: How can I assign/provision specific printers to specific users in specific security groups?  Part 2:  How can I allow users to self-provision additional printers from a limited set of specific printers that may be on the LAN but in different subnet?

Thanks...