Generally you do that with a proxy server and have your firewall setup to block outbound access by all hosts except that proxy server. But neither of those things have anything to do with a Windows domain, well except maybe using a GPO to push out the proxy settings.