For preventing USB transfers to external clients we block 32111 at the firewall. See http://kb.vmware.com/selfservice/viewAttachment.do?attachID=HorizonView-ReferencePorts-v1.pdf&documentID=2061913 for a really nice port diagram of View that shows this.
For printing, we disable the TP AutoConnect service and TP VC Gateway service on the View desktop, then deploy LAN printers via GPO. That way they can print to their internal printers from any location (work or home), but cannot print to their home printers. Staff are also not local admins so they cannot change either of the TP services. This solution precludes the need to determine the location of the individual, which makes it much easier to deploy and manage.
I am just starting a lab for v5.3, so I don't have any answers on PCoIP yet. If I do come across a solution for your question I will post it.
-Ray
