I personally use a PAC file. Specify our local network, if you're not on it then straight out to the Internet. You just need to store the PAC file somewhere on the user's laptop (We have a C:\Support folder) and then use a GPO to set the path.