Maybe use a powershell log on script that looks at their IP address in the registry and if it internal change the appropriate registry keys to enable and if internal do the opposite. I don't know off the top of my head what registry keys make this work but I know they are in HKLM/Policies/teredici/Pcoip...i THINK.
Some quick Google-Fu will help you out with their location.