You can also put a shortcut on the desktop that disables or enables the proxy as needed.

Have the user click that. Heck there used to clicking stuff without reason anyways.

We use that method here and it seems to work fine for us. Cheap easy method. During logon we re-enable the proxy.