Terminal Server on Windows 2003 server behind BM 3.8 sp4_ir5 firewall

internal users on TS wish to browse out through BM to internet

1) TID 10096704 states that pxyauth.exe does not work on Windows 2003 - is
this known to still be the case?

2) most recent version of pxyauth.exe I can find is from BM38 sp3 and sp4
and is dated 29 Oct 2003 is there a more recent version?

3) if users log into Windows and switch between workstation and TS sessions
is there a way to use a login script to get clntrust.exe to only run during
login to a workstation, and not run during login to TS ?