I want to make my network Active Directory controlled.
I want to enable internet connectivity in my client computers through some kind of startup/logon script.
How do I achieve this?
Proxy Server that requires AD authentication and have Active Directory set the proxy settings of user.
You also should have the users on a LAN that has no route to the internet when doing this.
You can buy cheap routers with linux installations that you can customize.
One option, therefore, is to configure the router to gateway clients that have signed in correctly, and drop everyone else's packets.
If your intent is to restrict internet access, you could set up a group policy in AD that points internet explorer to a non-existent proxy. Here's a link with some instructions for setting proxy on GPO. If you're trying to enable only to some sites, you could put these in the ignore list for the proxy server using the same GPO -- requests for these sites would then go to the gateway.
The drawback is that this works only if IE is the browser, if a user installs Firefox -- or any other browser or network application -- they can set/remove the proxy themselves.