Drop IE connection if PAC file not found

<p>When users are in the corporate network, their machines will grab the PAC file and use it.</p><p>However, when they bring the machine back, since the machines are unable to grab the PAC file (without VPN), IE revert to direct connection, hence bypass PAC file settings and go to any sites they wanted.</p><p>Is there a way to change the default settings of IE or the Windows to such that, if the PAC file is not present, no connect is allowed for IE.</p>