So, how would this script be deployed? Obviously if they are not on your network, it cannot be a logon script.

Why not just deploy proxy through WPAD?
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.